Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 23, 2025

This PR contains the following updates:

Package Type Update Change
azurerm (source) required_provider minor 4.44.0 -> 4.54.0

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.54.0

Compare Source

FEATURES:

  • New Action: azurerm_cdn_front_door_cache_purge (#​30765)
  • New Action: azurerm_data_protection_backup_instance_protect (#​31085)
  • New Action: azurerm_managed_redis_databases_flush (#​31132)
  • New Action: azurerm_mssql_execute_job (#​31095)
  • New List Resource: azurerm_network_interface (#​31012)
  • New List Resource: azurerm_network_profile (#​31127)
  • New List Resource: azurerm_network_security_group (#​31014)
  • New List Resource: azurerm_route_table (#​31015)

ENHANCEMENTS:

  • dependencies: go-azure-sdk - update to v0.20251107.1191907 (#​31095)
  • Data Source: azurerm_container_app - add support for the template.cooldown_period_in_seconds and template.polling_interval_in_seconds properties (#​29426)
  • azurerm_container_app - add support for the template.cooldown_period_in_seconds and template.polling_interval_in_seconds properties (#​29426)
  • azurerm_linux_function_app - add support for dotnet_version 10.0 (#​31007)
  • azurerm_linux_function_app_slot - add support for dotnet_version 10.0 (#​31007)
  • azurerm_linux_web_app - add support for dotnet_version 10.0 (#​31007)
  • azurerm_linux_web_app_slot - add support for dotnet_version 10.0 (#​31007)
  • azurerm_managed_redis - add support for persistence_append_only_file_backup_frequency and persistence_redis_database_backup_frequency properties (#​30964)
  • azurerm_resource_group - refactored from legacy SDK to use go-azure-sdk (#​30616)
  • azurerm_service_plan - suppress casing difference on sku_name (#​30907)
  • azurerm_storage_share_directory - Deprecate storage_share_id in favour of storage_share_url (#​28457)
  • azurerm_storage_share_file - Deprecate storage_share_id in favour of storage_share_url (#​28457)
  • azurerm_windows_function_app - add support for dotnet_version v10.0 (#​31007)
  • azurerm_windows_function_app_slot - add support for dotnet_version v10.0 (#​31007)
  • azurerm_windows_web_app - add support for dotnet_version v10.0 (#​31007)
  • azurerm_windows_web_app_slot - add support for dotnet_version v10.0 (#​31007)

BUG FIXES:

  • azurerm_orchestrated_virtual_machine_scale_set - Fix issue when using a specialized image (#​30889)
  • azurerm_virtual_network - remove RO values from update to avoid issues with API payload size limitation (#​30945)

v4.53.0

Compare Source

FEATURES:

  • New Resource: azurerm_api_management_workspace_certificate (#​30628)
  • New Resource: azurerm_mongo_cluster_firewall_rule (#​31062)

ENHANCEMENTS:

  • dependencies: automation - update to API version 2024-10-23 (#​30890)
  • dependencies: go-azure-sdk - update to v0.20251029.1173336 (#​31051)
  • dependencies: managedredis - update to API Version 2025-07-01 (#​31051)
  • dependencies: mongocluster - update to API version 2025-09-01 (#​30982)
  • azurerm_api_management_backend - add support for the circuit_breaker_rule block (#​30471)
  • azurerm_dynatrace_monitor - support for the YEARLY value in the billing_cycle property (#​31078)
  • azurerm_kubernetes_cluster_node_pool - support for the undrainable_node_behavior and max_unavailable properties (#​30563)
  • azurerm_managed_disk - support expanding Ultra Disks and Premium SSD v2 disk without downtime (#​30593)
  • azurerm_managed_redis - add support for public_network_access (#​31051)
  • azurerm_storage_table_entity - resource is now removed from state if it no longer exists in Azure (#​31064)
  • azurerm_synapse_spark_pool - add support for spark_version 3.5 (#​30900)
  • data.azurerm_postgresql_flexible_server - add support for zone and high_availability (#​31034)

BUG FIXES:

  • azurerm_dynatrace_monitor - the phone_number and country properties are no longer Required (#​31077)
  • azurerm_dynatrace_tag_rules - the log_rule.filtering_tag property is no longer required (#​31065)
  • azurerm_dynatrace_tag_rules - the metric_rule.filtering_tag property is no longer required (#​31065)
  • azurerm_kubernetes_cluster - fix crash in use of azure_active_directory_role_based_access_control (#​31101)
  • azurerm_logic_app_workflow - fix inaccurate error messages (#​30963)
  • azurerm_virtual_network_gateway - fix validation for policy_group.name and vpn_client_configuration.virtual_network_gateway_client_connection.policy_group_names (#​30454)

v4.52.0

Compare Source

NOTE: This release removes the azurerm_spatial_anchors_account resource and data source due to Azure having retired the service

FEATURES:

  • New Resource: azurerm_api_management_workspace_api_version_set (#​30498)

ENHANCEMENTS:

  • dependencies: Go updated to v1.25.3 (#​31020)
  • Data Source: azurerm_application_gateway - add support for the backend_http_settings.dedicated_backend_connection_enabled property (#​31033)
  • azurerm_application_gateway - add support for the backend_http_settings.dedicated_backend_connection_enabled property (#​31033)
  • azurerm_machine_learning_datastore_blobstorage - improve validation for storage_container_id (#​31002)
  • azurerm_machine_learning_datastore_datalake_gen2 - improve validation for storage_container_id (#​31002)
  • azurerm_windows_web_app - add support for the virtual_network_image_pull_enabled property (#​30920)
  • azurerm_windows_web_app_slot - add support for the virtual_network_image_pull_enabled property (#​30920)

BUG FIXES:

  • azurerm_container_registry_task - prevent a panic by adding a nil check (#​31043)

v4.51.0

Compare Source

FEATURES:

  • New Data Source: azurerm_oracle_resource_anchor (#​30823)
  • New Resource: azurerm_network_manager_routing_rule (#​30439)
  • New Resource: azurerm_oracle_resource_anchor (#​30823)

ENHANCEMENTS:

  • dependencies: dashboard - update to API version 2025-08-01 (#​30972)
  • dependencies: go-azure-sdk - update to v0.20251024.1223440 (#​30952)
  • dependencies: network - update to API version 2025-01-01 (#​30904)
  • azurerm_cognitive_account - add TextAnalytics to allowed kind validation for network_acls.bypass (#​30887)
  • azurerm_subnet_service_endpoint_storage_policy - add support for the /services/Azure/Databricks value in the definition.service_resources property (#​30762)

BUG FIXES:

  • Data Source: azurerm_managed_redis - fix a panic caused by a nested field access on a pointer without nil checking (#​30978)

v4.50.0

Compare Source

FEATURES:

  • New Data Source: azurerm_managed_redis (#​30060)
  • New Resource: azurerm_managed_redis (#​30060)
  • New Resource: azurerm_managed_redis_geo_replication (#​30060)

ENHANCEMENTS:

  • dependencies: go-azure-sdk update to v0.20251016.1163854 (#​30883)
  • dependencies: oracle - update to API version 2025-09-01 (#​30796)
  • Data Source: azurerm_container_app_environment - add support for the public_network_access property (#​30817)
  • azurerm_container_app_environment - add support for the public_network_access property (#​30817)
  • azurerm_mssql_job_target_group - the job_target.job_credential_id property is no longer required when database_name is not set to allow for authentication using a managed identity (#​30898)
  • azurerm_netapp_volume_resource - support for Cross Zone Region replication through the data_protection_replication block (#​30872)
  • azurerm_search_service - implement plan time error when local_authentication_enabled = false and authentication_failure_mode is set (#​30882)

BUG FIXES:

  • azurerm_mssql_database - allow existing zero or null value for auto_pause_delay_in_minutes and min_capacity of non-serverless database (#​30924)

v4.49.0

Compare Source

FEATURES:

  • New Data Source: azurerm_graph_services_account (#​30697)
  • New Data Source: azurerm_oracle_exascale_database_storage_vault (#​30043)
  • New Resource: azurerm_api_management_workspace_policy_fragment (#​30678)
  • New Resource: azurerm_oracle_exascale_database_storage_vault (#​30043)

ENHANCEMENTS:

  • Data Source: azurerm_data_protection_backup_vault - add support for the identity.identity_ids property (#​29061)
  • azurerm_consumption_budget_management_group - remove the maximum count validation for the notification block (#​29200)
  • azurerm_consumption_budget_resource_group - remove the maximum count validation for the notification block (#​29200)
  • azurerm_consumption_budget_subscription - remove the maximum count validation for the notification block (#​29200)
  • azurerm_data_protection_backup_vault - add support for the identity.identity_ids property (#​29061)
  • azurerm_data_protection_backup_vault - add support for UserAssigned and SystemAssigned, UserAssigned values to the identity.type property (#​29061)
  • azurerm_monitor_data_collection_rule - improve validation for data_sources.*.name (#​30851)
  • azurerm_search_service - support upgrading the sku based on tier (#​30842)
  • azurerm_storage_queue - support migrating from storage_account_name to storage_account_id (#​30836)

BUG FIXES:

  • azurerm_application_insights - fix an issue that caused tags to be removed when other properties were updated (#​30758)
  • azurerm_container_registry - fix the name length validation to allow 50 rather than 49 (#​30858)
  • azurerm_function_app_flex_consumption - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_function_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_function_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_web_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_web_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_mssql_database - fix validation for min_capacity and auto_pause_delay_in_minutes being set on non-serverless SKUs (#​30856)
  • azurerm_signalr_service_custom_certificate - remove unnecessary API requests and checks that could lead to a panic (#​30412)
  • azurerm_windows_function_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_windows_function_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_windows_web_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_windows_web_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)

v4.48.0

Compare Source

FEATURES:

  • New Data Source: azurerm_oracle_autonomous_database_clone_from_backup (#​29633)
  • New Data Source: azurerm_oracle_autonomous_database_clone_from_database (#​29633)
  • New Resource: azurerm_oracle_autonomous_database_clone_from_backup (#​29633)
  • New Resource: azurerm_oracle_autonomous_database_clone_from_database (#​29633)

ENHANCEMENTS:

  • dependencies: containerapps - update to API version 2025-07-01 (#​30801)
  • dependencies: containerservice - update to API version 2025-07-01 (#​30719)
  • dependencies: go-azure-sdk - update to v0.20251007.1195632 (#​30799)
  • dependencies: guestconfiguration - update to API version 2024-04-05 (#​30642)
  • dependencies: search - update to API version 2025-05-01 (#​30314)
  • azurerm_kubernetes_cluster - add support for AzureLinux3 and Ubuntu2204 to the default_node_pool.os_sku property (#​30719)
  • azurerm_kubernetes_cluster - add support for the ai_toolchain_operator_enabled property (#​30713)
  • azurerm_kubernetes_cluster_node_pool - add support for AzureLinux3 and Ubuntu2204 to the os_sku property (#​30719)
  • azurerm_linux_virtual_machine_scale_set - add support for the resilient_vm_creation_enabled and resilient_vm_deletion_enabled properties (#​30204)
  • azurerm_network_watcher_flow_log - changing the target_resource_id property no longer forces the resource to be replaced (#​30776)
  • azurerm_notification_hub_namespace - add support for replication_region and zone_redundancy_enabled (#​30531)
  • azurerm_windows_virtual_machine_scale_set - add support for the resilient_vm_creation_enabled and resilient_vm_deletion_enabled properties (#​30204)

BUG FIXES:

  • azurerm_eventhub_namespace - maximum_throughput_units can be set to 0 when auto_inflate_enabled is disabled (#​30777)
  • azurerm_log_analytics_workspace - fix the default value for local_authentication_enabled (#​30759)
  • azurerm_mssql_database - add validation to ensure that min_capacity and auto_pause_delay_in_minutes can only be set on serverless dbs (#​30790)
  • azurerm_mssql_server - the azuread_administrator block now updates in place rather than being deleted/recreated (#​30742)
  • azurerm_network_watcher_flow_log - the target_resource_id property is now included in the update request payload resolving an issue where changing it failed to recreate or update the resource (#​30776)
  • azurerm_pim_eligible_role_assignment - improve filter used during List requests to prevent timeouts (#​30705)
  • azurerm_postgresql_flexible_server_virtual_endpoint - fix read error when in replica set in failover state (#​30789)

v4.47.0

Compare Source

FEATURES:

  • New Resource: azurerm_api_management_workspace_policy (#​30547)

ENHANCEMENTS:

  • dependencies: go-azure-sdk - update to v0.20250924.1155608 (#​30693)
  • azurerm_cognitive_account - add support for value AIServices to kind property (#​30423)
  • azurerm_cognitive_account - add the project_management_enabled property (#​30423)
  • azurerm_cognitive_account - add the network_injection property (#​30423)
  • azurerm_palo_alto_local_rulestack_rule - increase limit for priority to 1000000 (#​30712)
  • azurerm_stream_analytics_job - add support for the Msi value in the job_storage_account.authentication_mode property (#​30728)

BUG FIXES:

  • azurerm_management_group_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
  • azurerm_resource_group_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
  • azurerm_resource_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
  • azurerm_storage_account - fix error that occurs around queue_properties when not specified (#​30746)
  • azurerm_subscription_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)

v4.46.0

Compare Source

ENHANCEMENTS:

  • dependencies: frontdoor/webapplicationfirewallpolicies - update to API version 2025-03-01 (#​29742)
  • azurerm_cdn_frontdoor_firewall_policy - support for the captcha_cookie_expiration_in_minutes property and the CAPTCHA value in the custom_rule.action property (#​29742)
  • azurerm_cdn_frontdoor_security_policy - add update ability (#​30299)
  • azurerm_cognitive_account - add support for C2, C3, C4, D3, and S1 to sku_name (#​30655)
  • azurerm_flex_function_app - add support for the http_concurrency property (#​29678)
  • azurerm_kubernetes_cluster - add support for the api_server_access_profile.virtual_network_integration_enabled and api_server_access_profile.subnet_id properties (#​30559)
  • azurerm_machine_learning_workspace - add support for the service_side_encryption_enabled property (#​30478)
  • azurerm_mysql_flexible_server - add support for the managed_hsm_key_id property (#​30502)
  • azurerm_netapp_volume - add support for updating protocols (#​30643)
  • azurerm_netapp_volume_group_oracle - add support for updating protocols (#​30643)
  • azurerm_netapp_volume_group_sap_hana - add support for updating protocols (#​30643)
  • azurerm_postgresql_flexible_server - add support for the 17 value in the version property (#​30683)
  • azurerm_storage_queue - add support for the storage_account_id property (#​28752)

BUG FIXES:

  • azurerm_cdn_frontdoor_firewall_policy - fix the read function so it now correctly marks the resource as gone (#​30704)

v4.45.1

Compare Source

NOTES:

This release contains a Terraform Plugin SDK v2 version bump that prevents identity change validation from raising an error when prior identity is empty (all attributes are null).

BUG FIXES:

  • dependencies: hashicorp/terraform-plugin-sdk/v2 - update to v2.38.1 (#​30667)
  • azurerm_network_interface - ensure identity is set during non-refresh apply operations (#​30667)

v4.45.0

Compare Source

FEATURES:

  • New Action: azurerm_virtual_machine_power (#​30647)
  • New List Resource: azurerm_storage_account (#​30614)
  • New List Resource: azurerm_virtual_network (#​30614)

ENHANCEMENTS:

  • dependencies: go-azure-sdk - update to v0.20250908.1192604 (#​30644)
  • azurerm_kubernetes_cluster - add support for the network_profile.advanced_networking block (#​30434)
  • azurerm_storage_account - expiration_action supports Block (#​30599) (#​30599)
  • azurerm_subnet - add support for sharing_scope (#​30600)

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Sep 23, 2025
@hmcts-jenkins-a-to-c
Copy link
Contributor

hmcts-jenkins-a-to-c bot commented Sep 23, 2025

Plan Result (aat)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 2 to add, 5 to change, 1 to destroy.
  • Create
    • module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin
  • Update
    • azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["HOST"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PASS"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PORT"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["USER"]
  • Replace
    • module.postgresql.null_resource.set-user-permissions-additionaldbs["bulk_scan"]
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-DATABASE/ff57b9039f9544be979c275eb31b0769"
        name                    = "processor-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-HOST/2dc8dc1977504071bd90e0c4b8a591fe"
        name                    = "processor-POSTGRES-HOST"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-PASS/f96764ee7960495181d327706327af90"
        name                    = "processor-POSTGRES-PASS"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-PORT/e6b64e0e09e54e39828f8891d838e308"
        name                    = "processor-POSTGRES-PORT"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-USER/9f01ce8315674da5994d66e4761258b7"
        name                    = "processor-POSTGRES-USER"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin will be created
  + resource "azurerm_postgresql_flexible_server_active_directory_administrator" "pgsql_adadmin" {
      + id                  = (known after apply)
      + object_id           = "3c52c98b-07a3-4a97-92b9-298e86bb1ca9"
      + principal_name      = "DTS Platform Operations PostgreSQL Admin Access"
      + principal_type      = "Group"
      + resource_group_name = "bulk-scan-processor-flexible-postgres-db-v15-data-aat"
      + server_name         = "bulk-scan-processor-flexible-postgres-db-v15-aat"
      + tenant_id           = "531ff96d-0ae9-462a-8d2d-bec7c0b42082"
    }

  # module.postgresql.null_resource.set-user-permissions-additionaldbs["bulk_scan"] must be replaced
-/+ resource "null_resource" "set-user-permissions-additionaldbs" {
      ~ id       = "4018587050716706880" -> (known after apply)
      ~ triggers = { # forces replacement
          + "db_reader_schemas" = "public"
          ~ "script_hash"       = "dbe0102f3129d4463913d5e01177e806bc6954005bdd98f20c242658634a1bbc" -> "88abfc1a97fc27a8f4d01362525f3b65e85409d3a475ecc79b11ad09a019e469"
            # (3 unchanged elements hidden)
        }
    }

Plan: 2 to add, 5 to change, 1 to destroy.

@hmcts-jenkins-a-to-c
Copy link
Contributor

hmcts-jenkins-a-to-c bot commented Sep 23, 2025

Plan Result (prod)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 2 to add, 5 to change, 2 to destroy.
  • Update
    • azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["HOST"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PASS"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PORT"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["USER"]
  • Replace
    • module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin
    • module.postgresql.null_resource.set-user-permissions-additionaldbs["bulk_scan"]
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-DATABASE/8d2709eb815247cfbd969e34ec1b803b"
        name                    = "processor-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-HOST/22b5cad58cd6486ab11e901432abbbc4"
        name                    = "processor-POSTGRES-HOST"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-PASS/408559177e444d13b97a8dd3a30d1d01"
        name                    = "processor-POSTGRES-PASS"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-PORT/2cb775893a054a92aee474f5e676c2ef"
        name                    = "processor-POSTGRES-PORT"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-USER/a52d84d0f7ea4178a5c0231ee4c2a71f"
        name                    = "processor-POSTGRES-USER"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin must be replaced
-/+ resource "azurerm_postgresql_flexible_server_active_directory_administrator" "pgsql_adadmin" {
      ~ id                  = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/bulk-scan-processor-flexible-postgres-db-v15-data-prod/providers/Microsoft.DBforPostgreSQL/flexibleServers/bulk-scan-processor-flexible-postgres-db-v15-prod/administrators/4d0554dd-fe60-424a-be9c-36636826d927" -> (known after apply)
      ~ object_id           = "4d0554dd-fe60-424a-be9c-36636826d927" -> "ef17f368-0aa5-43d5-9264-28080f83755e" # forces replacement
      ~ principal_name      = "DTS Platform Operations SC" -> "DTS Platform Operations PostgreSQL Admin Access SC" # forces replacement
        # (4 unchanged attributes hidden)
    }

  # module.postgresql.null_resource.set-user-permissions-additionaldbs["bulk_scan"] must be replaced
-/+ resource "null_resource" "set-user-permissions-additionaldbs" {
      ~ id       = "3348472372089987920" -> (known after apply)
      ~ triggers = { # forces replacement
          + "db_reader_schemas" = "public"
          ~ "script_hash"       = "dbe0102f3129d4463913d5e01177e806bc6954005bdd98f20c242658634a1bbc" -> "88abfc1a97fc27a8f4d01362525f3b65e85409d3a475ecc79b11ad09a019e469"
            # (3 unchanged elements hidden)
        }
    }

Plan: 2 to add, 5 to change, 2 to destroy.

@renovate renovate bot changed the title Update Terraform azurerm to v4.45.1 Update Terraform azurerm to v4.46.0 Sep 26, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 2 times, most recently from f7ad068 to 4ce78fa Compare September 30, 2025 13:17
@renovate renovate bot changed the title Update Terraform azurerm to v4.46.0 Update Terraform azurerm to v4.47.0 Oct 2, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 4ce78fa to 5a3cf67 Compare October 2, 2025 16:30
@renovate renovate bot changed the title Update Terraform azurerm to v4.47.0 Update Terraform azurerm to v4.48.0 Oct 14, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 5a3cf67 to fcddc32 Compare October 14, 2025 20:36
@renovate renovate bot changed the title Update Terraform azurerm to v4.48.0 Update Terraform azurerm to v4.49.0 Oct 16, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from fcddc32 to f7f7931 Compare October 16, 2025 20:13
@renovate renovate bot enabled auto-merge (squash) October 17, 2025 12:52
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from f7f7931 to 49705cc Compare October 24, 2025 03:36
@renovate renovate bot changed the title Update Terraform azurerm to v4.49.0 Update Terraform azurerm to v4.50.0 Oct 24, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 49705cc to 40d8f09 Compare October 30, 2025 23:21
@renovate renovate bot changed the title Update Terraform azurerm to v4.50.0 Update Terraform azurerm to v4.51.0 Oct 30, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 40d8f09 to 6f1a0aa Compare November 7, 2025 01:03
@renovate renovate bot changed the title Update Terraform azurerm to v4.51.0 Update Terraform azurerm to v4.52.0 Nov 7, 2025
@renovate renovate bot changed the title Update Terraform azurerm to v4.52.0 Update Terraform azurerm to v4.53.0 Nov 15, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 6f1a0aa to 618abd0 Compare November 15, 2025 04:38
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 618abd0 to 3bd7d56 Compare November 19, 2025 22:29
@renovate renovate bot changed the title Update Terraform azurerm to v4.53.0 Update Terraform azurerm to v4.54.0 Nov 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants