Upgrade terraform-provider-cloudflare to v5.20.0

[pulumi-bot]

This PR was generated via $ upgrade-provider pulumi/pulumi-cloudflare --kind=provider --target-bridge-version=latest --target-version=5.20.0 --allow-missing-docs=true.

---

• Upgrading terraform-provider-cloudflare from 5.19.1 to 5.20.0.
  Fixes Upgrade terraform-provider-cloudflare to v5.20.0 #1604

[github-actions]

No actionable issues found. Upstream submodule SHA matches the v5.20.0 tag; go.mod/go.sum transitive bumps are consistent.

Reviewed by Internal Trusted PR Reviewer

Add this agentic workflows to your repo

To install this agentic workflow, run

gh aw add pulumi-labs/gh-aw-internal/.github/workflows/gh-aw-pr-review.md@8a92f53fac170563f7727cacab2dbedb5d5b9e29

[github-actions]

Does the PR have any schema changes?

Found 145 breaking changes:

Resources

• 🟢 "cloudflare:index/apiShieldSchema:ApiShieldSchema": required inputs: "zoneId" input has changed to Required
• "cloudflare:index/emailSecurityImpersonationRegistry:EmailSecurityImpersonationRegistry": required:
  • 🟢 "comments" property is no longer Required
  • 🟢 "directoryId" property is no longer Required
  • 🟢 "directoryNodeId" property is no longer Required
  • 🟢 "externalDirectoryNodeId" property is no longer Required
  • 🟢 "provenance" property is no longer Required
• "cloudflare:index/emailSecurityTrustedDomains:EmailSecurityTrustedDomains":
  • 🟡 inputs: "bodies" missing
  • 🟡 properties: "bodies" missing output "bodies"
  • 🟢 required inputs: "pattern" input has changed to Required
• 🟢 "cloudflare:index/magicTransitSiteAcl:MagicTransitSiteAcl": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/magicTransitSiteLan:MagicTransitSiteLan": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/magicTransitSiteWan:MagicTransitSiteWan": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/queueConsumer:QueueConsumer": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2BucketCors:R2BucketCors": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2BucketEventNotification:R2BucketEventNotification": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2BucketLifecycle:R2BucketLifecycle": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2BucketLock:R2BucketLock": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2BucketSippy:R2BucketSippy": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2CustomDomain:R2CustomDomain": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/r2ManagedDomain:R2ManagedDomain": required inputs: "accountId" input has changed to Required
• 🟢 "cloudflare:index/regionalHostname:RegionalHostname": required inputs: "zoneId" input has changed to Required
• 🟢 "cloudflare:index/streamCaptionLanguage:StreamCaptionLanguage": required inputs: "accountId" input has changed to Required

Functions

• 🟢 "cloudflare:index/getAccountPermissionGroup:getAccountPermissionGroup": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getAccountRole:getAccountRole": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getCallsSfuApp:getCallsSfuApp": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getCallsTurnApp:getCallsTurnApp": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getCloudforceOneRequestAsset:getCloudforceOneRequestAsset": inputs: required: "accountId" input has changed to Required
• 🟡 "cloudflare:index/getCustomHostnames:getCustomHostnames": inputs: "ssl" type changed from "number" to "integer"
• 🟡 "cloudflare:index/getEmailSecurityBlockSender:getEmailSecurityBlockSender": inputs: "patternId" type changed from "integer" to "string"
• 🟡 "cloudflare:index/getEmailSecurityImpersonationRegistry:getEmailSecurityImpersonationRegistry": inputs: "displayNameId" missing input "displayNameId"
• 🟡 "cloudflare:index/getEmailSecurityTrustedDomains:getEmailSecurityTrustedDomains": inputs: "trustedDomainId" type changed from "integer" to "string"
• 🟢 "cloudflare:index/getMagicTransitSiteAcl:getMagicTransitSiteAcl": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getMagicTransitSiteLan:getMagicTransitSiteLan": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getMagicTransitSiteWan:getMagicTransitSiteWan": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getMtlsCertificateAssociations:getMtlsCertificateAssociations": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getPagesDomain:getPagesDomain": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getQueueConsumer:getQueueConsumer": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getR2BucketCors:getR2BucketCors": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getR2BucketEventNotification:getR2BucketEventNotification": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getR2BucketLifecycle:getR2BucketLifecycle": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getR2BucketLock:getR2BucketLock": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getR2BucketSippy:getR2BucketSippy": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getR2CustomDomain:getR2CustomDomain": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getRegistrarDomain:getRegistrarDomain": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getResourceGroup:getResourceGroup": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getStream:getStream": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getStreamAudioTrack:getStreamAudioTrack": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getStreamCaptionLanguage:getStreamCaptionLanguage": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getStreamDownload:getStreamDownload": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getStreamLiveInput:getStreamLiveInput": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getStreamWatermark:getStreamWatermark": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getWorkerVersion:getWorkerVersion": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getWorkersDeployment:getWorkersDeployment": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getWorkersKv:getWorkersKv": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getWorkersScriptSubdomain:getWorkersScriptSubdomain": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getZeroTrustTunnelCloudflaredConfig:getZeroTrustTunnelCloudflaredConfig": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getZeroTrustTunnelCloudflaredToken:getZeroTrustTunnelCloudflaredToken": inputs: required: "accountId" input has changed to Required
• 🟢 "cloudflare:index/getZeroTrustTunnelWarpConnectorToken:getZeroTrustTunnelWarpConnectorToken": inputs: required: "accountId" input has changed to Required

Types

• 🟢 "cloudflare:index/AiGatewayOtel:AiGatewayOtel": required: "authorization" property is no longer Required
• 🟡 "cloudflare:index/AiSearchInstanceMetadata:AiSearchInstanceMetadata": properties: "searchForAgents" missing
• 🔴 "cloudflare:index/AiSearchInstanceMetadataSearchForAgents:AiSearchInstanceMetadataSearchForAgents" missing
• 🔴 "cloudflare:index/EmailSecurityTrustedDomainsBody:EmailSecurityTrustedDomainsBody" missing
• 🟢 "cloudflare:index/getAiGatewayDynamicRoutingVersion:getAiGatewayDynamicRoutingVersion": required: "isValid" property has changed to Required
• "cloudflare:index/getAiGatewaysResult:getAiGatewaysResult": required:
  • 🟢 "guardrails" property has changed to Required
  • 🟢 "spendLimits" property has changed to Required
• "cloudflare:index/getAiSearchInstanceMetadata:getAiSearchInstanceMetadata":
  • 🟡 properties: "searchForAgents" missing
  • 🟢 required: "searchForAgents" property is no longer Required
• 🔴 "cloudflare:index/getAiSearchInstanceMetadataSearchForAgents:getAiSearchInstanceMetadataSearchForAgents" missing
• 🟢 "cloudflare:index/getAiSearchInstancesResult:getAiSearchInstancesResult": required: "cacheTtl" property has changed to Required
• "cloudflare:index/getAiSearchInstancesResultMetadata:getAiSearchInstancesResultMetadata":
  • 🟡 properties: "searchForAgents" missing
  • 🟢 required: "searchForAgents" property is no longer Required
• 🔴 "cloudflare:index/getAiSearchInstancesResultMetadataSearchForAgents:getAiSearchInstancesResultMetadataSearchForAgents" missing
• "cloudflare:index/getCustomHostnameFilter:getCustomHostnameFilter":
  • 🟡 properties: "ssl" type changed from "number" to "integer"
  • 🟢 required: "ssl" property has changed to Required
• "cloudflare:index/getEmailSecurityBlockSendersResult:getEmailSecurityBlockSendersResult":
  • 🟡 properties: "id" type changed from "integer" to "string"
  • 🟢 required: "modifiedAt" property has changed to Required
• "cloudflare:index/getEmailSecurityImpersonationRegistriesResult:getEmailSecurityImpersonationRegistriesResult":
  • 🟡 properties: "id" type changed from "integer" to "string"
  • 🟢 required: "modifiedAt" property has changed to Required
• "cloudflare:index/getEmailSecurityTrustedDomainsListResult:getEmailSecurityTrustedDomainsListResult":
  • 🟡 properties: "id" type changed from "integer" to "string"
  • 🟢 required: "modifiedAt" property has changed to Required
• 🟢 "cloudflare:index/getMagicTransitConnectorDevice:getMagicTransitConnectorDevice": required: "type" property has changed to Required
• 🟢 "cloudflare:index/getMagicTransitConnectorsResultDevice:getMagicTransitConnectorsResultDevice": required: "type" property has changed to Required
• 🟢 "cloudflare:index/getMagicTransitSiteLanStaticAddressingDhcpServer:getMagicTransitSiteLanStaticAddressingDhcpServer": required: "dhcpOptions" property has changed to Required
• 🟢 "cloudflare:index/getMagicTransitSiteLansResultStaticAddressingDhcpServer:getMagicTransitSiteLansResultStaticAddressingDhcpServer": required: "dhcpOptions" property has changed to Required
• 🟢 "cloudflare:index/getOrganizationMeta:getOrganizationMeta": required: "hierarchyTags" property has changed to Required
• 🟢 "cloudflare:index/getOrganizationsResultMeta:getOrganizationsResultMeta": required: "hierarchyTags" property has changed to Required
• 🟢 "cloudflare:index/getSnippetListResult:getSnippetListResult": required: "id" property has changed to Required
• 🟢 "cloudflare:index/getWorkerObservabilityTraces:getWorkerObservabilityTraces": required: "propagationPolicy" property has changed to Required
• 🟢 "cloudflare:index/getWorkerVersionBindingSimple:getWorkerVersionBindingSimple": required: "mitigationTimeout" property has changed to Required
• 🟢 "cloudflare:index/getWorkerVersionsResultBindingSimple:getWorkerVersionsResultBindingSimple": required: "mitigationTimeout" property has changed to Required
• 🟢 "cloudflare:index/getWorkersResultObservabilityTraces:getWorkersResultObservabilityTraces": required: "propagationPolicy" property has changed to Required
• 🟢 "cloudflare:index/getWorkersScriptsResultObservabilityTraces:getWorkersScriptsResultObservabilityTraces": required: "propagationPolicy" property has changed to Required
• 🟢 "cloudflare:index/getWorkflowInstances:getWorkflowInstances": required: "rollingBack" property has changed to Required
• 🟢 "cloudflare:index/getWorkflowsResult:getWorkflowsResult": required: "schedules" property has changed to Required
• 🟢 "cloudflare:index/getWorkflowsResultInstances:getWorkflowsResultInstances": required: "rollingBack" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpPortalServer:getZeroTrustAccessAiControlsMcpPortalServer": required:
  • 🟢 "errorDetails" property has changed to Required
  • 🟢 "isSharedOauthCallbackEnabled" property has changed to Required
  • 🟢 "secureWebGateway" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt:getZeroTrustAccessAiControlsMcpPortalServerUpdatedPrompt":
  • 🟡 properties: "description" missing
  • required:
    • 🟢 "description" property is no longer Required
    • 🟢 "portalDescription" property has changed to Required
    • 🟢 "serverDescription" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpPortalServerUpdatedTool:getZeroTrustAccessAiControlsMcpPortalServerUpdatedTool":
  • 🟡 properties: "description" missing
  • required:
    • 🟢 "description" property is no longer Required
    • 🟢 "portalDescription" property has changed to Required
    • 🟢 "serverDescription" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpPortalsResultServer:getZeroTrustAccessAiControlsMcpPortalsResultServer": required:
  • 🟢 "errorDetails" property has changed to Required
  • 🟢 "isSharedOauthCallbackEnabled" property has changed to Required
  • 🟢 "secureWebGateway" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt:getZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedPrompt":
  • 🟡 properties: "description" missing
  • required:
    • 🟢 "description" property is no longer Required
    • 🟢 "portalDescription" property has changed to Required
    • 🟢 "serverDescription" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool:getZeroTrustAccessAiControlsMcpPortalsResultServerUpdatedTool":
  • 🟡 properties: "description" missing
  • required:
    • 🟢 "description" property is no longer Required
    • 🟢 "portalDescription" property has changed to Required
    • 🟢 "serverDescription" property has changed to Required
• "cloudflare:index/getZeroTrustAccessAiControlsMcpServersResult:getZeroTrustAccessAiControlsMcpServersResult": required:
  • 🟢 "errorDetails" property has changed to Required
  • 🟢 "isSharedOauthCallbackEnabled" property has changed to Required
  • 🟢 "secureWebGateway" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupExclude:getZeroTrustAccessGroupExclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupInclude:getZeroTrustAccessGroupInclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupIsDefault:getZeroTrustAccessGroupIsDefault": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupRequire:getZeroTrustAccessGroupRequire": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupsResultExclude:getZeroTrustAccessGroupsResultExclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupsResultInclude:getZeroTrustAccessGroupsResultInclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupsResultIsDefault:getZeroTrustAccessGroupsResultIsDefault": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessGroupsResultRequire:getZeroTrustAccessGroupsResultRequire": required: "cloudflareAccountMember" property has changed to Required
• "cloudflare:index/getZeroTrustAccessIdentityProviderConfig:getZeroTrustAccessIdentityProviderConfig": required:
  • 🟢 "enableEncryption" property has changed to Required
  • 🟢 "restrictToAccountMembers" property has changed to Required
• "cloudflare:index/getZeroTrustAccessIdentityProvidersResult:getZeroTrustAccessIdentityProvidersResult": required:
  • 🟢 "readOnly" property has changed to Required
  • 🟢 "samlCertificateSet" property has changed to Required
  • 🟢 "samlCertificateSetId" property has changed to Required
• "cloudflare:index/getZeroTrustAccessIdentityProvidersResultConfig:getZeroTrustAccessIdentityProvidersResultConfig": required:
  • 🟢 "enableEncryption" property has changed to Required
  • 🟢 "redirectUrl" property has changed to Required
  • 🟢 "restrictToAccountMembers" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessPoliciesResultExclude:getZeroTrustAccessPoliciesResultExclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessPoliciesResultInclude:getZeroTrustAccessPoliciesResultInclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessPoliciesResultRequire:getZeroTrustAccessPoliciesResultRequire": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessPolicyExclude:getZeroTrustAccessPolicyExclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessPolicyInclude:getZeroTrustAccessPolicyInclude": required: "cloudflareAccountMember" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustAccessPolicyRequire:getZeroTrustAccessPolicyRequire": required: "cloudflareAccountMember" property has changed to Required
• "cloudflare:index/getZeroTrustDeviceCustomProfilesResult:getZeroTrustDeviceCustomProfilesResult": required:
  • 🟢 "dnsSearchSuffixes" property has changed to Required
  • 🟢 "virtualNetworks" property has changed to Required
• 🟢 "cloudflare:index/getZeroTrustNetworkHostnameRoutesResult:getZeroTrustNetworkHostnameRoutesResult": required: "tunType" property has changed to Required

New resources:

• index/aiSearchNamespace.AiSearchNamespace
• index/customCsr.CustomCsr
• index/dlsPrefixBinding.DlsPrefixBinding
• index/flagshipApp.FlagshipApp
• index/flagshipFlag.FlagshipFlag
• index/googleTagGateway.GoogleTagGateway
• index/loadBalancerMonitorGroup.LoadBalancerMonitorGroup
• index/oauthClient.OauthClient
• index/originCloudRegion.OriginCloudRegion
• index/secretsStore.SecretsStore
• index/secretsStoreSecret.SecretsStoreSecret
• index/share.Share
• index/shareRecipient.ShareRecipient
• index/shareResource.ShareResource
• index/zeroTrustDeviceDeploymentGroups.ZeroTrustDeviceDeploymentGroups
• index/zeroTrustDlpDataClass.ZeroTrustDlpDataClass
• index/zeroTrustDlpDataTag.ZeroTrustDlpDataTag
• index/zeroTrustDlpDataTagCategory.ZeroTrustDlpDataTagCategory
• index/zeroTrustDlpSensitivityGroup.ZeroTrustDlpSensitivityGroup
• index/zeroTrustDlpSensitivityLevel.ZeroTrustDlpSensitivityLevel
• index/zeroTrustDlpSensitivityLevelOrder.ZeroTrustDlpSensitivityLevelOrder
• index/zeroTrustTunnelWarpConnectorConfig.ZeroTrustTunnelWarpConnectorConfig

New functions:

• index/getAiSearchNamespace.getAiSearchNamespace
• index/getAiSearchNamespaces.getAiSearchNamespaces
• index/getCustomCsr.getCustomCsr
• index/getCustomCsrs.getCustomCsrs
• index/getDlsPrefixBinding.getDlsPrefixBinding
• index/getDlsPrefixBindings.getDlsPrefixBindings
• index/getFlagshipApp.getFlagshipApp
• index/getFlagshipApps.getFlagshipApps
• index/getFlagshipFlag.getFlagshipFlag
• index/getFlagshipFlags.getFlagshipFlags
• index/getGoogleTagGateway.getGoogleTagGateway
• index/getLoadBalancerMonitorGroup.getLoadBalancerMonitorGroup
• index/getLoadBalancerMonitorGroups.getLoadBalancerMonitorGroups
• index/getOauthClient.getOauthClient
• index/getOauthClients.getOauthClients
• index/getOauthScopes.getOauthScopes
• index/getOriginCloudRegion.getOriginCloudRegion
• index/getOriginCloudRegions.getOriginCloudRegions
• index/getSecretsStore.getSecretsStore
• index/getSecretsStoreSecret.getSecretsStoreSecret
• index/getSecretsStoreSecrets.getSecretsStoreSecrets
• index/getSecretsStores.getSecretsStores
• index/getShare.getShare
• index/getShareRecipient.getShareRecipient
• index/getShareRecipients.getShareRecipients
• index/getShareResource.getShareResource
• index/getShareResources.getShareResources
• index/getShares.getShares
• index/getZeroTrustDeviceDeploymentGroups.getZeroTrustDeviceDeploymentGroups
• index/getZeroTrustDeviceDeploymentGroupsList.getZeroTrustDeviceDeploymentGroupsList
• index/getZeroTrustDlpDataClass.getZeroTrustDlpDataClass
• index/getZeroTrustDlpDataClasses.getZeroTrustDlpDataClasses
• index/getZeroTrustDlpDataTag.getZeroTrustDlpDataTag
• index/getZeroTrustDlpDataTagCategories.getZeroTrustDlpDataTagCategories
• index/getZeroTrustDlpDataTagCategory.getZeroTrustDlpDataTagCategory
• index/getZeroTrustDlpDataTags.getZeroTrustDlpDataTags
• index/getZeroTrustDlpSensitivityGroup.getZeroTrustDlpSensitivityGroup
• index/getZeroTrustDlpSensitivityGroups.getZeroTrustDlpSensitivityGroups
• index/getZeroTrustDlpSensitivityLevel.getZeroTrustDlpSensitivityLevel
• index/getZeroTrustDlpSensitivityLevelOrder.getZeroTrustDlpSensitivityLevelOrder
• index/getZeroTrustDlpSensitivityLevels.getZeroTrustDlpSensitivityLevels
• index/getZeroTrustResourceLibraryApplication.getZeroTrustResourceLibraryApplication
• index/getZeroTrustResourceLibraryApplications.getZeroTrustResourceLibraryApplications
• index/getZeroTrustResourceLibraryCategories.getZeroTrustResourceLibraryCategories
• index/getZeroTrustResourceLibraryCategory.getZeroTrustResourceLibraryCategory
• index/getZeroTrustTunnelWarpConnectorConfig.getZeroTrustTunnelWarpConnectorConfig

Maintainer note: consult the runbook for dealing with any breaking changes.