⬆️ terraform: Bump hashicorp/azurerm from 3.105.0 to 4.11.0 in /infrastructure

[dependabot]

Bumps hashicorp/azurerm from 3.105.0 to 4.11.0.

Release notes

Sourced from hashicorp/azurerm's releases.

v4.11.0

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#28083)
• New Resource: azurerm_eventgrid_namespace (#27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#28075)
• batch - upgrade api version to 2024-07-01 (#27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#28039)
• azurerm_arc_machine - add support for the identity and tags properties (#27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#28039)

BUG:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#27828)

v4.10.0

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#27827)
• New Resource: azurerm_netapp_backup_vault (#27188)
• New Resource: azurerm_netapp_backup_policy (#27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#27936)

... (truncated)

Changelog

Sourced from hashicorp/azurerm's changelog.

3.116.0 (August 16, 2024)

DEPRECATIONS:

All Azure Kubernetes Service (AKS) properties related to preview features are deprecated since they will not be available in a stable API. Please see https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/4.0-upgrade-guide#aks-migration-to-stable-api for more details (#26863)

FEATURES:

• New Resource: azurerm_ai_services (#26008)
• New Resource: azurerm_communication_service_email_domain_association (#26432)
• New Resource: azurerm_dev_center_project_environment_type (#26941)
• New Resource: azurerm_extended_location_custom_location (#24267)
• New Resource: azurerm_postgresql_flexible_server_virtual_endpoint (#26708)

ENHANCEMENTS:

• notificationhub - updating to use version 2023-09-01 (#26528)
• azurerm_api_management_api - update validation of path to allow single character strings (#26922)
• azurerm_cosmosdb_account - add support for the property burst_capacity_enabled (#26986)
• azurerm_linux_function_app - add support for vnet_image_pull_enabled property in 4.0 (#27001)
• azurerm_linux_function_app_slot - add support for vnet_image_pull_enabled property in 4.0 (#27001)
• azurerm_logic_app_standard - add support for v8.0 in site_config.dotnet_framework_version (#26983)
• azurerm_management_group_policy_assignment - remove length restriction on name (#27055)
• azurerm_recovery_services_vault - add support for the identity block (#26254)
• azurerm_web_application_firewall_policy - add support for the js_challenge_cookie_expiration_in_minutes property (#26878)
• azurerm_windows_function_app - add support for vnet_image_pull_enabled property in 4.0 (#27001)
• azurerm_windows_function_app_slot - add support for vnet_image_pull_enabled property in 4.0 (#27001)

BUG FIXES:

• Data Source: azurerm_storage_account - add default_share_level_permission to the azure_files_authentication to prevent invalid address errors (#26996)
• Data Source: azurerm_search_service - expose the tags property (#26978)
• Data Source: azurerm_virtual_machine - populate missing power_state (#26991)
• Data Source: azurerm_virtual_machine_scale_set - populate missing power_state (#26991)
• azurerm_api_management_api_schema - correctly unmarshal definition and components (#26531)
• azurerm_cdn_frontdoor_secret - fix issue where expiration_date was being set into the parent block (#26982)
• azurerm_container_app_environment - fix diff suppress on infrastructure_resource_group_name (#27007)
• azurerm_express_route_connection - prevent sending private_link_fast_path_enabled in the payload if it hasn't been explicitly set (#26928)
• azurerm_machine_learning_workspace - serverless_compute can now be updated (#26940)
• azurerm_mssql_database - fix issue where the database cannot be upgraded to use serverless due to the behaviour of the license_type field (#26850)
• azurerm_mssql_database - prevent error when creating Free edition by setting long_term_retention_policy and short_term_retention_policy as empty (#26894)
• azurerm_nginx_deployment - omit capacity when creating deployments with a basic plan (#26223)
• azurerm_role_management_policy - prevent panic when updating activation_rules.approval_stage (#26800)
• azurerm_sentinel_threat_intelligence_indicator - prevent panic when importing this resource (#26976)
• azurerm_servicebus_namespace - fix panic reading encryption with versionless ids (#27060)
• azurerm_synapse_spark_pool - prevent plan diff due to API behaviour by setting node_count as Computed (#26953)
• azurerm_virtual_network_gateway_connection - fix issue where ingress_nat_rule_ids was updating the egress rules on updates (#27022)

3.115.0 (August 09, 2024)

... (truncated)

Commits

• 391b165 v4.11.0
• 7857bbe azurerm_api_management_api fix the bug in example usage (#27758)
• f03ec88 Update CHANGELOG.md tidy up multiple headings for 4.11.0
• 7517f7e azurerm_monitor_aad_diagnostic_setting - deprecate `enabled_log.retention_p...
• 6c249ed Update for #25412
• 9d15d7d fix: create content settings for linux function app slot too (#25412)
• 8fcb096 Update for #26015
• 779f7f1 azurerm_network_watcher_flow_log: Property changes (#26015)
• ec3737e Update for #28083
• 34e001d New Ephemeral Resources - azurerm_key_vault_secret `azurerm_key_vault_certi...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #320.