diff --git a/.changelog/1685.txt b/.changelog/1685.txt
new file mode 100644
index 00000000000..482fa55af16
--- /dev/null
+++ b/.changelog/1685.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_ipsec_tunnel: add support for `healthcheck_enabled`, `health_check_target`, `healthcheck_type`, `psk`
+```