NOTES:
- Major Version: Version 2.0 of the Azure Provider is a major version - some deprecated fields/resources have been removed - please refer to the 2.0 upgrade guide for more information.
- Provider Block: The Azure Provider now requires that a
features
block is specified within the Provider block, which can be used to alter the behaviour of certain resources - more information on thefeatures
block can be found in the documentation. - Terraform 0.10/0.11: Version 2.0 of the Azure Provider no longer supports Terraform 0.10 or 0.11 - you must upgrade to Terraform 0.12 to use version 2.0 of the Azure Provider.
FEATURES:
- Custom Timeouts: - all resources within the Azure Provider now allow configuring custom timeouts - please see Terraform's Timeout documentation and the documentation in each data source resource for more information.
- Requires Import: The Azure Provider now checks for the presence of an existing resource prior to creating it - which means that if you try and create a resource which already exists (without importing it) you'll be prompted to import this into the state.
- New Data Source:
azurerm_eventhub_authorization_rule
[GH-5805] - New Resource:
azurerm_express_route_gateway
[GH-5523] - New Resource:
azurerm_linux_virtual_machine
[GH-5705] - New Resource:
azurerm_linux_virtual_machine_scale_set
[GH-5705] - New Resource:
azurerm_network_interface_security_group_association
[GH-5784] - New Resource:
azurerm_virtual_machine_scale_set_extension
[GH-5705] - New Resource:
azurerm_windows_virtual_machine
[GH-5705] - New Resource:
azurerm_windows_virtual_machine_scale_set
[GH-5705]
BREAKING CHANGES:
- The Environment Variable
DISABLE_CORRELATION_REQUEST_ID
has been renamed toARM_DISABLE_CORRELATION_REQUEST_ID
to match the other Environment Variables - The field
tags
is no longercomputed
- Data Source:
azurerm_api_management
- removing the deprecatedsku
block [GH-5725] - Data Source:
azurerm_app_service
- removing the deprecated fieldsubnet_mask
from thesite_config
block [GH-5823] - Data Source:
azurerm_app_service_plan
- the deprecatedproperties
block has been removed since these properties have been moved to the top level [GH-5717] - Data Source:
azurerm_azuread_application
- This data source has been removed since it was deprecated [GH-5748] - Data Source:
azurerm_azuread_service_principal
- This data source has been removed since it was deprecated [GH-5748] - Data Source:
azurerm_dns_zone
- removing the deprecatedzone_type
field [GH-5794] - Data Source:
azurerm_dns_zone
- removing the deprecatedregistration_virtual_network_ids
field [GH-5794] - Data Source:
azurerm_dns_zone
- removing the deprecatedresolution_virtual_network_ids
field [GH-5794] - Data Source:
azurerm_key_vault
- removing thesku
block since this has been deprecated in favour of thesku_name
field [GH-5774] - Data Source:
azurerm_key_vault_key
- removing the deprecatedvault_uri
field [GH-5774] - Data Source:
azurerm_key_vault_secret
- removing the deprecatedvault_uri
field [GH-5774] - Data Source:
azurerm_kubernetes_cluster
- removing the fielddns_prefix
from theagent_pool_profile
block [GH-5823] - Data Source:
azurerm_network_interface
- removing the deprecated fieldinternal_fqdn
[GH-5823] - Data Source:
azurerm_private_link_service
- removing the deprecated fieldnetwork_interface_ids
[GH-5823] - Data Source:
azurerm_role_definition
- removing the aliasVirtualMachineContributor
which has been deprecated in favour of the full nameVirtual Machine Contributor
[GH-5733] - Data Source:
azurerm_scheduler_job_collection
- This data source has been removed since it was deprecated [GH-5712] - Data Source:
azurerm_subnet
- removing the deprecatedip_configuration
field [GH-5801] - Data Source:
azurerm_virtual_network
- removing the deprecatedaddress_spaces
field [GH-5823] azurerm_api_management
- removing the deprecatedsku
block [GH-5725]azurerm_api_management
- removing the deprecated fields in thesecurity
block [GH-5725]azurerm_application_gateway
- the fieldfqdns
within thebackend_address_pool
block is no longer computed [GH-5823]azurerm_application_gateway
- the fieldip_addresses
within thebackend_address_pool
block is no longer computed [GH-5823]azurerm_application_gateway
- the deprecated fieldfqdn_list
within thebackend_address_pool
block has been removed [GH-5823]azurerm_application_gateway
- the deprecated fieldip_address_list
within thebackend_address_pool
block has been removed [GH-5823]azurerm_application_gateway
- the deprecated fielddisabled_ssl_protocols
has been removed [GH-5823]azurerm_application_gateway
- the fielddisabled_protocols
within thessl_policy
block is no longer computed [GH-5823]azurerm_app_service
- removing the fieldsubnet_mask
from thesite_config
block [GH-5823]azurerm_app_service
- the fieldip_address
within thesite_config
block now refers to a CIDR block, rather than an IP Address to match the Azure API [GH-5823]azurerm_app_service
- removing the fieldvirtual_network_name
from thesite_config
block [GH-5823]azurerm_app_service_plan
- the deprecatedproperties
block has been removed since these properties have been moved to the top level [GH-5717]azurerm_app_service_slot
- removing the fieldsubnet_mask
from thesite_config
block [GH-5823]azurerm_app_service_slot
- the fieldip_address
within thesite_config
block now refers to a CIDR block, rather than an IP Address to match the Azure API [GH-5823]azurerm_app_service_slot
- removing the fieldvirtual_network_name
from thesite_config
block [GH-5823]azurerm_application_gateway
- updating the default value for thebody
field within thematch
block from*
to an empty string [GH-5752]azurerm_automation_account
- removing thesku
block which has been deprecated in favour of thesku_name
field [GH-5781]azurerm_automation_credential
- removing the deprecatedaccount_name
field [GH-5781]azurerm_automation_runbook
- removing the deprecatedaccount_name
field [GH-5781]azurerm_automation_schedule
- removing the deprecatedaccount_name
field [GH-5781]azurerm_availability_set
- updating the default value formanaged
fromfalse
totrue
[GH-5724]azurerm_azuread_application
- This resource has been removed since it was deprecated [GH-5748]azurerm_azuread_service_principal_password
- This resource has been removed since it was deprecated [GH-5748]azurerm_azuread_service_principal
- This resource has been removed since it was deprecated [GH-5748]azurerm_client_config
- removing the deprecated fieldservice_principal_application_id
[GH-5823]azurerm_client_config
- removing the deprecated fieldservice_principal_object_id
[GH-5823]azurerm_cognitive_account
- removing the deprecatedsku_name
block [GH-5797]azurerm_container_group
- removing theport
field from thecontainer
block [GH-5823]azurerm_container_group
- removing theprotocol
field from thecontainer
block [GH-5823]azurerm_container_group
- theports
field is no longer Computed [GH-5823]azurerm_container_group
- theprotocol
field within theports
block is no longer Computed and now defaults toTCP
[GH-5823]azurerm_container_group
- removing the deprecated fieldcommand
[GH-5823]azurerm_container_registry
- removing the deprecatedstorage_account
block [GH-5823]azurerm_container_service
- This resource has been removed since it was deprecated [GH-5709]azurerm_devspace_controller
- removing the deprecatedsku
block [GH-5795]azurerm_dns_cname_record
- removing the deprecatedrecords
field [GH-5794]azurerm_dns_ns_record
- removing the deprecatedrecords
field [GH-5794]azurerm_dns_zone
- removing the deprecatedzone_type
field [GH-5794]azurerm_dns_zone
- removing the deprecatedregistration_virtual_network_ids
field [GH-5794]azurerm_dns_zone
- removing the deprecatedresolution_virtual_network_ids
field [GH-5794]azurerm_eventhub
- removing the deprecatedlocation
field [GH-5793]azurerm_eventhub_authorization_rule
- removing the deprecatedlocation
field [GH-5793]azurerm_eventhub_consumer_group
- removing the deprecatedlocation
field [GH-5793]azurerm_eventhub_namespace
- removing the deprecatedkafka_enabled
field since this is now managed by Azure [GH-5793]azurerm_eventhub_namespace_authorization_rule
- removing the deprecatedlocation
field [GH-5793]azurerm_firewall
- removing the deprecated fieldinternal_public_ip_address_id
from theip_configuration
block [GH-5823]azurerm_firewall
- the fieldpublic_ip_address_id
within theip_configuration
block is now required [GH-5823]azurerm_frontdoor
- Theforwarding_protocol
property now defaults toHttpsOnly
[GH-5792]azurerm_function_app
- removing the fieldvirtual_network_name
from thesite_config
block [GH-5823]azurerm_function_app
- updating the fieldip_address
within theip_restriction
block to accept a CIDR rather than an IP Address to match the updated API behaviour [GH-5823]azurerm_iot_dps
- This resource has been removed since it was deprecated [GH-5753]azurerm_iot_dps_certificate
- This resource has been removed since it was deprecated [GH-5753]azurerm_iothub
- The deprecatedsku.tier
property will be removed. [GH-5790]azurerm_iothub_dps
- The deprecatedsku.tier
property will be removed. [GH-5790]azurerm_key_vault
- removing thesku
block since this has been deprecated in favour of thesku_name
field [GH-5774]azurerm_key_vault_access_policy
- removing the deprecated fieldvault_name
which has been superseded by thekey_vault_id
field [GH-5774]azurerm_key_vault_access_policy
- removing the deprecated fieldresource_group_name
which has been superseded by thekey_vault_id
field [GH-5774]azurerm_key_vault_certificate
- removing the deprecatedvault_uri
field [GH-5774]azurerm_key_vault_key
- removing the deprecatedvault_uri
field [GH-5774]azurerm_key_vault_secret
- removing the deprecatedvault_uri
field [GH-5774]azurerm_kubernetes_cluster
- updating the default value forload_balancer_sku
toStandard
fromBasic
[GH-5747]azurerm_kubernetes_cluster
- the blockdefault_node_pool
is now required [GH-5823]azurerm_kubernetes_cluster
- removing the deprecatedagent_pool_profile
block [GH-5823]azurerm_kubernetes_cluster
- the fieldenable_pod_security_policy
is no longer computed [GH-5823]azurerm_lb_backend_address_pool
- removing the deprecatedlocation
field [GH-5823]azurerm_lb_nat_pool
- removing the deprecatedlocation
field [GH-5823]azurerm_lb_nat_rule
- removing the deprecatedlocation
field [GH-5823]azurerm_lb_probe
- removing the deprecatedlocation
field [GH-5823]azurerm_lb_rule
- removing the deprecatedlocation
field [GH-5823]azurerm_log_analytics_workspace_linked_service
- This resource has been removed since it was deprecated [GH-5754]azurerm_log_analytics_linked_service
- Theresource_id
field has been moved from thelinked_service_properties
block to the top-level and the deprecated fieldlinked_service_properties
will be removed. This has been replaced by theresource_id
resource [GH-5775]azurerm_maps_account
- thesku_name
field is now case-sensitive [GH-5776]azurerm_mariadb_server
- removing thesku
block since it's been deprecated in favour of thesku_name
field [GH-5777]azurerm_mssql_elasticpool
- removing the deprecatedelastic_pool_properties
block [GH-5744]azurerm_mysql_server
- removing the deprecatedsku
block [GH-5743]azurerm_network_interface
- removing the deprecatedapplication_gateway_backend_address_pools_ids
field from theip_configurations
block [GH-5784]azurerm_network_interface
- removing the deprecatedapplication_security_group_ids
field from theip_configurations
block [GH-5784]azurerm_network_interface
- removing the deprecatedload_balancer_backend_address_pools_ids
field from theip_configurations
block [GH-5784]azurerm_network_interface
- removing the deprecatedload_balancer_inbound_nat_rules_ids
field from theip_configurations
block [GH-5784]azurerm_network_interface
- removing the deprecatedinternal_fqdn
field [GH-5784]azurerm_network_interface
- removing thenetwork_security_group_id
field in favour of a new split-out resourceazurerm_network_interface_security_group_association
[GH-5784]azurerm_network_interface_application_security_group_association
- removing theip_configuration_name
field associations between Network Interfaces and Application Security Groups now need to be made to all IP Configurations [GH-5815]azurerm_network_interface
- thevirtual_machine_id
field is now computed-only since it's not setable [GH-5784]azurerm_notification_hub_namesapce
- removing thesku
block in favour of thesku_name
argument [GH-5722]azurerm_postgresql_server
- removing thesku
block which has been deprecated in favour of thesku_name
field [GH-5721]azurerm_private_link_service
- removing the deprecated fieldnetwork_interface_ids
[GH-5823]azurerm_public_ip
- making theallocation_method
field required [GH-5823]azurerm_public_ip
- removing the deprecated fieldpublic_ip_address_allocation
[GH-5823]azurerm_relay_namespace
- removing thesku
block in favour of thesku_name
field [GH-5719]azurerm_scheduler_job
- This resource has been removed since it was deprecated [GH-5712]azurerm_scheduler_job_collection
- This resource has been removed since it was deprecated [GH-5712]azurerm_storage_account
- removing the deprecatedaccount_type
field [GH-5710]azurerm_storage_account
- removing the deprecatedenable_advanced_threat_protection
field [GH-5710]azurerm_storage_account
- updating the default value forenable_https_traffic_only
fromfalse
totrue
[GH-5808]azurerm_storage_blob
- making thetype
field case-sensitive [GH-5710]azurerm_storage_blob
- removing the deprecatedattempts
field [GH-5710]azurerm_storage_blob
- removing the deprecatedresource_group_name
field [GH-5710]azurerm_storage_container
- removing the deprecatedresource_group_name
field [GH-5710]azurerm_storage_container
- removing the deprecatedproperties
block [GH-5710]azurerm_storage_queue
- removing the deprecatedresource_group_name
field [GH-5710]azurerm_storage_share
- removing the deprecatedresource_group_name
field [GH-5710]azurerm_storage_table
- removing the deprecatedresource_group_name
field [GH-5710]azurerm_subnet
- removing the deprecatedip_configuration
field [GH-5801]azurerm_subnet
- removing the deprecatednetwork_security_group_id
field [GH-5801]azurerm_subnet
- removing the deprecatedroute_table_id
field [GH-5801]azurerm_subnet
- making theactions
list within theservice_delegation
block within theservice_endpoints
block non-computed [GH-5801]azurerm_virtual_network_peering
-allow_virtual_network_access
now defaults to true, matching the API and Portal behaviours. [GH-5832]azurerm_virtual_wan
- removing the deprecated fieldsecurity_provider_name
[GH-5823]
IMPROVEMENTS:
- web: updating to API version
2019-08-01
[GH-5823] - Data Source:
azurerm_kubernetes_service_version
- support for filtering of preview releases [GH-5662] azurerm_dedicated_host
- support for settingsku_name
toDSv3-Type2
andESv3-Type2
[GH-5768]azurerm_key_vault
- support for configuringpurge_protection_enabled
[GH-5344]azurerm_key_vault
- support for configuringsoft_delete_enabled
[GH-5344]azurerm_sql_database
- support for configuringzone_redundant
[GH-5772]azurerm_storage_account
- support for configuring thestatic_website
block [GH-5649]azurerm_storage_account
- support for configuringcors_rules
within theblob_properties
block [GH-5425]azurerm_subnet
- support for delta updates [GH-5801]azurerm_windows_virtual_machine
- fixing a bug when provisioning from a Shared Gallery image [GH-5661]
BUG FIXES:
azurerm_application_insights
- theapplication_type
field is now case sensitive as documented [GH-5817]azurerm_api_management_api
- allows blankpath
field [GH-5833]azurerm_eventhub_namespace
- the fieldip_rule
within thenetwork_rulesets
block now supports a maximum of 128 items [GH-5831]azurerm_eventhub_namespace
- the fieldvirtual_network_rule
within thenetwork_rulesets
block now supports a maximum of 128 items [GH-5831]azurerm_linux_virtual_machine
- using the delete custom timeout during deletion [GH-5764]azurerm_network_interface
- thedns_servers
field now respects ordering [GH-5784]azurerm_public_ip_prefix
- fixing the validation for theprefix_length
to match the Azure API [GH-5693]azurerm_recovery_services_vault
- using the requested cloud rather than the default [GH-5825]azurerm_role_assignment
- validating that thename
is a UUID [GH-5624]azurerm_signalr_service
- ensuring the SignalR segment is parsed in the correct case [GH-5737]azurerm_subnet
- supporting updating of theenforce_private_link_endpoint_network_policies
field [GH-5801]azurerm_subnet
- supporting updating of theenforce_private_link_service_network_policies
field [GH-5801]azurerm_windows_virtual_machine
- using the delete custom timeout during deletion [GH-5764]
For information on v1.44.0 and prior releases, please see the v1.44.0 changelog.