Bump hashicorp/azurerm from 2.91.0 to 3.0.1 in /iac/terraform #50

dependabot · 2022-03-24T23:23:29Z

Bumps hashicorp/azurerm from 2.91.0 to 3.0.1.

Release notes

Sourced from hashicorp/azurerm's releases.

v3.0.1

BUG FIXES:

provider: the prevent_deletion_if_contains_resources feature flag within the resource_group block now defaults to true GH-16021

v3.0.0

3.0.0 (March 24, 2022)

NOTES:

Major Version: Version 3.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 3.0 upgrade guide for more information.

When upgrading to v3.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here) - the next major release of the AzureRM Provider (v4.0) will require Terraform 1.0 or later.

FEATURES:

New Data Source: azurerm_healthcare_workspace (#15759)

New Data Source: azurerm_key_vault_encrypted_value (#15873)

New Data Source: azurerm_managed_api (#15797)

New Resource: azurerm_api_connection (#15797)

New Resource: azurerm_healthcare_workspace (#15759)

New Resource: azurerm_stream_analytics_function_javascript_uda (#15831)

New Resource: azurerm_security_center_server_vulnerability_assessment_virtual_machine (#15747)

ENHANCEMENTS:

dependencies: updating to v62.3.0 of github.com/Azure/azure-sdk-for-go (#15927)

dependencies: updating to v0.26.0 of github.com/hashicorp/go-azure-helpers (#15889)

dependencies: updating appplatform to API Version 2022-01-01-preview (#15597)

provider: MSAL (and Microsoft Graph) is now used for authentication instead of ADAL (and Azure Active Directory Graph) (#12443)

provider: all (non-deprecated) resources now validate the Resource ID during import (#15989)

provider: added a new feature flag within the api_management block for recover_soft_deleted, for configuring whether a soft-deleted azurerm_api_management should be recovered during creation (#15871)

provider: added a new feature flag within the key_vault block for recover_soft_deleted_certificates, for configuring whether a soft-deleted azurerm_key_vault_certificate should be recovered during creation (#10273)

provider: added a new feature flag within the key_vault block for purge_soft_deleted_certificates_on_destroy, for configuring whether a deleted azurerm_key_vault_certificate should be purged during deletion (#10273)

provider: added a new feature flag within the key_vault block for recover_soft_deleted_keys, for configuring whether a soft-deleted azurerm_key_vault_key should be recovered during creation (#10273)

provider: added a new feature flag within the key_vault block for purge_soft_deleted_keys_on_destroy, for configuring whether a deleted azurerm_key_vault_key should be purged during deletion (#10273)

provider: added a new feature flag within the key_vault block for recover_soft_deleted_secrets, for configuring whether a soft-deleted azurerm_key_vault_secret should be recovered during creation (#10273)

provider: added a new feature flag within the key_vault block for purge_soft_deleted_secrets_on_destroy, for configuring whether a deleted azurerm_key_vault_secret should be purged during deletion (#10273)

provider: added a new feature flag within the resource_group block for prevent_deletion_if_contains_resources, for configuring whether Terraform should prevent the deletion of a Resource Group which still contains items (#13777)

provider: the feature flag permanently_delete_on_destroy within the log_analytics_workspace block now defaults to true (#15948)

Resources supporting Availability Zones: Zones are now treated consistently across the Provider and the field within Terraform has been renamed to either zone (for a single Zone) or zones (where multiple can be defined) - the complete list of resources can be found in the 3.0 Upgrade Guide (#14588)

Resources supporting Managed Identity: Identity blocks are now treated consistently across the Provider - the complete list of resources can be found in the 3.0 Upgrade Guide (#15187)

provider: removing the network and relaxed_locking feature flags, since this is now enabled by default (#15719)

Data Source: azurerm_linux_function_app - support for the storage_key_vault_secret_id property (#15793)

Data Source: azurerm_storage_account_sas - now exports the tag and filter attributes (#15863)

Data Source: azurerm_windows_function_app - support for storage_key_vault_secret_id property (#15793)

azurerm_application_insights - can now disable Rule and Action Groups that are automatically created (#15892)

azurerm_cdn_endpoint - the host_name property has been renamed to fqdn (#15992)

azurerm_eventgrid_system_topic_event_subscription - support for the delivery_property property (#15559)

azurerm_iothub - add support for the authentication_type and identity_id properties in the file_upload block (#15874)

azurerm_kubernetes_cluster - the kube_admin_config block is now marked as sensitive in addition to all items within it (#4105)

... (truncated)

Changelog

Sourced from hashicorp/azurerm's changelog.

2.99.0 (March 11, 2022)

NOTES

Preparation for 3.0: We intend for v2.99.0 to be the last release in the 2.x line - we’ll be turning our focus to 3.0 with the next release. We recommend consulting the list of changes coming in 3.0 to be aware and trialling the Beta available in the latest 2.x releases if you’re interested.

FEATURES:

New Beta Resource: azurerm_function_app_function (#15605)

New Beta Resource: azurerm_function_app_hybrid_connection (#15702)

New Beta Resource: azurerm_web_app_hybrid_connection (#15702)

New Resource: azurerm_cosmosdb_sql_role_assignment (#15038)

New Resource: azurerm_cosmosdb_sql_role_definition (#15035)

ENHANCEMENTS:

dependencies: updating to v62.1.0 of github.com/Azure/azure-sdk-for-go (#15716)

dependencies: updating compute to 2021-11-01 (#15099)

dependencies: updating kubernetescluster to 2022-01-02-preview (#15648)

dependencies: updating sentinel to 2021-09-01-preview (#14983)

Data Source: azurerm_kubernetes_cluster - deprecated the addon_profile block in favour of aci_connector_linux, azure_policy_enabled, http_application_routing_enabled, ingress_application_gateway, key_vault_secrets_provider, oms_agent and open_service_mesh_enabled properties (#15584)

Data Source: azurerm_kubernetes_cluster - deprecated the role_based_access_control block in favour of azure_active_directory_role_based_access_control and role_based_access_control_enabled properties (#15584)

Data Source: azurerm_servicebus_namespace_authorization_rule - support for the namespace_id property (#15671)

Data Source: azurerm_servicebus_namespace_disaster_recovery_config - support for the namespace_id property (#15671)

Data Source: azurerm_servicebus_queue - support for the namespace_id property (#15671)

Data Source: azurerm_servicebus_queue_authorization_rule - support for the queue_id property (#15671)

Data Source: azurerm_servicebus_subscription - support for the topic_id property (#15671)

Data Source: azurerm_servicebus_topic - support for the namespace_id property (#15671)

Data Source: azurerm_servicebus_topic_authorization_rule - support for the topic_id property (#15671)

Data Source: azurerm_virtual_network - support for the tags property (#14882)

azurerm_batch_account - support for customer managed keys (#14749)

azurerm_container_registry support for the export_policy_enabled property (#15036)

azurerm_kubernetes_cluster - deprecate the role_based_access_control block in favour of role_based_access_control_enabled and azure_active_directory_role_based_access_control (#15546)

azurerm_iothub - deprecate the ip_filter_rule property in favour of the network_rule_set property (#15590)

azurerm_lb_nat_rule - the frontend_port and backend_port properties now support 0 (#15694)

azurerm_machine_learning_compute_instance - updating the validation on the name property (#14839)

azurerm_mssql_database_extended_auditing_policy - support for the enabled property (#15624)

azurerm_mssql_server_extended_auditing_policy - support for the enabled property (#15624)

azurerm_management_group_policy_assignment - the parameters property can now be updated (#15623)

azurerm_mssql_server - the administrator_login and administrator_login_password properties are now optional when Azure AD authentication is enforced (#15771)

azurerm_resource_policy_assignment - the parameters property can now be updated (#15623)

azurerm_resource_group_policy_assignment - the parameters property can now be updated (#15623)

azurerm_recovery_service_vault - support for the cross_region_restore_enabled property (#15757)

azurerm_subscription_policy_assignment - the parameters property can now be updated (#15623)

azurerm_storage_object_replication - support for replicating containers across subscriptions (#15603)

BUG FIXES:

azurerm_backup_protected_vm - the source_vm_id property is now case insensitive (#15656)

azurerm_batch_job - will not longer fail during creation if multiple common_environment_properties are set (#15686)

... (truncated)

Commits

1a16053 v3.0.1
ea5387f Features block schema fixes
00af1bb Update README.md
df01122 Changelog for #16021
e624458 Merge pull request #16021 from hashicorp/bugfix/rg-prevent-deletion-feature
e06ad28 Features: be explicit about all default values
59a99dd Bugfix: default the resource group prevent_deletion_if_contains_resources f...
522468a placeholder for 3.1.0
8621a75 v3.0.0
0b6e7a6 Merge pull request #16018 from hashicorp/b/mssql-auditing-hotfix
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)