Provider support for custom hostnames requires SSL while the API does not

[ryanmilne-digicert]

Confirmation

• This is a bug with an existing resource and is not a feature request or enhancement. Feature requests should be submitted with Cloudflare Support or your account team.
• I have searched the issue tracker and my issue isn't already found.
• I have replicated my issue using the latest version of the provider and it is still present.

Terraform and Cloudflare provider version

Terraform v1.13.0
on darwin_arm64

• provider registry.terraform.io/cloudflare/cloudflare v5.9.0
• provider registry.terraform.io/hashicorp/aws v6.13.0

Affected resource(s)

• cloudflare_custom_hostname

Terraform configuration files

resource "cloudflare_custom_hostname" "custom_hostname" {
  zone_id  = cloudflare_zone.zone.id
  hostname = "test.example.com"
  custom_origin_server = "origin.somedomain.com"
}

Link to debug output

Terraform provides an empty log file

Panic output

No response

Expected output

  # cloudflare_custom_hostname.custom_hostname will be created
  + resource "cloudflare_custom_hostname" "custom_hostname" {
      + created_at                  = (known after apply)
      + custom_origin_server        = "origin.somedomain.com"
      + hostname                    = "test.example.com"
      + id                          = (known after apply)
      + ownership_verification      = (known after apply)
      + ownership_verification_http = (known after apply)
      + status                      = (known after apply)
      + verification_errors         = (known after apply)
      + zone_id                     = "b4b33705ef8f69a3a6f890a7c5090d66"
    }

Actual output

╷
│ Error: Missing required argument
│ 
│   on main.tf line 80, in resource "cloudflare_custom_hostname" "custom_hostname":
│   80: resource "cloudflare_custom_hostname" "custom_hostname" {
│ 
│ The argument "ssl" is required, but no definition was found.
╵

Steps to reproduce

Defined cloudflare_custom_hostname resource without providing the ssl

Additional factoids

I understand that this may not qualify as a bug report, but my Cloudflare support recommended I create an issue for this. If there is a different way or place for this to be handled then please let me know.

The provider requires SSL configuration for custom hostnames, but the Cloudflare API does not.
https://cfapi.centminmod.com/#custom-ssl-for-a-zone-edit-ssl-configuration

The request is to update the resource schema to make ssl optional to allign with the API.

References

#6332

[KaydeeDee]

Hi there - The documentation you listed above is quite old, please see how up to date docs here: https://developers.cloudflare.com/api/resources/custom_hostnames/methods/create/ as well as the Terraform docs related to your issue: https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/custom_hostname

[mgirouard]

The docs linked are not only old but also unofficial -- the centminmod.com is not a hostname that Cloudflare owns or publishes content to.

[KaydeeDee]

Closing this as up to date docs resolve this issue.

[ryanmilne-digicert]

Please reopen this issue. While I did link to older documentation, the issue still remains that the Cloudflare provider for Terraform requires the SSL block for custom_hostnames while the API does not.

type CustomHostnameModel struct {
	...
	SSL                       *CustomHostnameSSLModel                                                `tfsdk:"ssl" json:"ssl,required"`
	...

I created a PR at the same time of this issue with the change I had to make for our use case.

#6332