Skip to content

Conversation

@efalcao
Copy link
Contributor

@efalcao efalcao commented Nov 20, 2025

  • I understand that this repository is auto-generated and my pull request may not be merged

Changes being requested

The zero_trust_connectivity_directory_service resource was renamed. Updated the e2e test to match the new resource name

Acceptance test run results

  • I have run acceptance tests for my changes and included the results below
ok  	github.com/cloudflare/terraform-provider-cloudflare/internal/services/connectivity_directory_service	14.628s

Additional context & links

musa-cf and others added 30 commits November 17, 2025 17:21
The following resources are modified by these generated changes:
- workers_cron_trigger
- workers_custom_domain
- workers_deployment
- workers_for_platforms_dispatch_namespace
- workers_kv
- workers_kv_namespace
- workers_route
- workers_script
… resources

The following resources are modified by these generated changes:
- healthcheck
- load_balancer
- load_balancer_monitor
- load_balancer_pool
The following resources are modified by these generated changes:
- account
- account_member
- account_token
- api_token
- token_validation_config (added)
- token_validation_rules (added)
…E resources

The following resources are modified by these generated changes:
- cloudforce_one_request
- cloudforce_one_request_asset
- cloudforce_one_request_message
- cloudforce_one_request_priority
- zero_trust_access_custom_page
- zero_trust_access_group
- zero_trust_access_identity_provider
- zero_trust_access_infrastructure_target
- zero_trust_access_key_configuration
- zero_trust_access_mtls_certificate
- zero_trust_access_policy
- zero_trust_access_service_token
- zero_trust_access_short_lived_certificate
- zero_trust_access_tag
- zero_trust_device_custom_profile
- zero_trust_device_custom_profile_local_domain_fallback
- zero_trust_device_default_profile
- zero_trust_device_default_profile_local_domain_fallback
- zero_trust_device_managed_networks
- zero_trust_device_posture_integration
- zero_trust_device_posture_rule
- zero_trust_dex_test
- zero_trust_dlp_custom_entry
- zero_trust_dlp_custom_profile
- zero_trust_dlp_entry
- zero_trust_dlp_integration_entry
- zero_trust_dlp_predefined_entry
- zero_trust_dlp_predefined_profile
- zero_trust_dns_location
- zero_trust_gateway_certificate
- zero_trust_gateway_policy
- zero_trust_gateway_proxy_endpoint
- zero_trust_gateway_settings
- zero_trust_list
- zero_trust_network_hostname_route
- zero_trust_risk_scoring_integration
- zero_trust_tunnel_cloudflared
- zero_trust_tunnel_cloudflared_config
- zero_trust_tunnel_cloudflared_route
- zero_trust_tunnel_cloudflared_virtual_network
- zero_trust_tunnel_warp_connector
- zero_trust_access_ai_controls_mcp_portal (added)
- zero_trust_access_ai_controls_mcp_server (added)
* ci: build migrator v2 in ci

* chore: uptake migrator v2 for dns_record
…are#6417)

This adds acceptance test for token validation resources:

```
$ TF_ACC=1 go test ./internal/services/token_validation_* -run "^TestAccCloudflareTokenValidationConfig|TestAccCloudflareTokenValidationRules" -v -count 1
=== RUN   TestAccCloudflareTokenValidationConfig
--- PASS: TestAccCloudflareTokenValidationConfig (42.65s)
PASS
ok      github.com/cloudflare/terraform-provider-cloudflare/internal/services/token_validation_config   46.029s
=== RUN   TestAccCloudflareTokenValidationRules
--- PASS: TestAccCloudflareTokenValidationRules (21.90s)
PASS
ok      github.com/cloudflare/terraform-provider-cloudflare/internal/services/token_validation_rules    23.824s
```
…loudflare#6421)

This change adds the token validation and schema validation acceptance tests to CI runner.
Acceptance test zone `terraform.cfapi.net` seems to already be entitled to utilize both services.

It also ensures that the schema validation tests can be executed in parallel without interferring with each other:
```
$ TF_ACC=1 go test ./internal/services/token_validation_* ./internal/services/schema_validation_* -run "^TestAccCloudflareTokenValidationConfig|TestAccCloudflareTokenValidationRules|TestAccCloudflarePerOperationSetting|TestAccCloudflareSchemaValidationSchemas|TestAccCloudflareSchemaValidationZoneSettings" -v -count 1
=== RUN   TestAccCloudflareTokenValidationConfig
--- PASS: TestAccCloudflareTokenValidationConfig (36.15s)
PASS
ok  	github.com/cloudflare/terraform-provider-cloudflare/internal/services/token_validation_config	37.827s
=== RUN   TestAccCloudflareTokenValidationRules
--- PASS: TestAccCloudflareTokenValidationRules (26.03s)
PASS
ok  	github.com/cloudflare/terraform-provider-cloudflare/internal/services/token_validation_rules	28.480s
=== RUN   TestAccCloudflarePerOperationSetting
--- PASS: TestAccCloudflarePerOperationSetting (15.87s)
PASS
ok  	github.com/cloudflare/terraform-provider-cloudflare/internal/services/schema_validation_operation_settings	21.278s
=== RUN   TestAccCloudflareSchemaValidationSchemas
--- PASS: TestAccCloudflareSchemaValidationSchemas (13.31s)
PASS
ok  	github.com/cloudflare/terraform-provider-cloudflare/internal/services/schema_validation_schemas	16.719s
=== RUN   TestAccCloudflareSchemaValidationZoneSettings
--- PASS: TestAccCloudflareSchemaValidationZoneSettings (18.18s)
PASS
ok  	github.com/cloudflare/terraform-provider-cloudflare/internal/services/schema_validation_settings	22.567s
```
* Add mcp portals acceptance tests

* Fix mcp portals acceptance tests

* Fix mcp portals acceptance tests
* Add acceptance tests for sso connector resource

* Removing test staging option

* Create ZT IDP before attempting SSO connector operations

---------

Co-authored-by: scabell <[email protected]>
maxwellpeterson and others added 29 commits November 19, 2025 19:56
…urces (cloudflare#6357)

* fix: cloudflare_worker resource can be cleanly imported

- Add plan modifiers for created_on and updated_on to prevent these
  properties from incorrectly appearing in the diff
- Fill in all default values to prevent user-configurable properties
  from being marked as unknown
- These were causing an unnecessary update to be performed on import

* fix: cloudflare_worker_version resource can be cleanly imported

- Allow in-place updates to write provider-only attributes (module content_file) to state
- This allows the resource to be imported without recreation
- This property can either be a boolean or list of strings, the API accepts both
- Update resource to accept list of strings in addition to boolean values
…e#6407)

* chore: add support for boolean run_worker_first

* chore: adding upgrade test

---------

Co-authored-by: Chris Thorwarth <[email protected]>
* chore(api): update composite API spec

---------

Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>
Co-authored-by: Chris Thorwarth <[email protected]>
* chore(api): update composite API spec

* fix: multipart request in cloudflare_workers_kv

---------

Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>
Co-authored-by: Chris Thorwarth <[email protected]>
* chore(api): update composite API spec

* chore: adding sweeper

* chore: adding sweeper for workers

---------

Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>
Co-authored-by: Chris Thorwarth <[email protected]>
* chore(dns_record): rename testdata

* chore(dns_record): update test data refs

* fix(dns_record): method to compare two dns records are equal

* fix(dns_record): inconsistent apply
…are#6440)

* removing computed fields to fix policy order

* using jsonencode for resources
…flare#6472)

* feat(api_token): api token migrator
- state upgrader for api tokens
- migration test
- bumps schema version to 1

* feat(account_token): account token migrator
- state upgrader for account tokens
- migration test
- bumps schema version to 1
…re#6364)

Adds UseStateForUnknown plan modifier for some computed attributes

Co-authored-by: Tyler Stanish <[email protected]>
…ssues (cloudflare#6365)

When domains are not specified in alphabetical order, the plan shows changes
after refreshing from the API. This is because the API returns them in alphabetical order.  To
resolve, this change switches the zero_trust_device_custom_profile_local_domain_fallback
attribute from a list to set.

Co-authored-by: Tyler Stanish <[email protected]>
* resolves cloudflare#5652

* Unifying queue consumer script and script_name in terraform state

* Populate queue consumer info in queue resource

* Modify mtls resource and mtls, org, and app tests

* feat(api): api update

* fixing bad merge

* Marking consumer_id as computed because it is generated from the create consumer response

* Adding tests for queue_consumer

* Refactoring tests to have test configs in files

* Adding more tests for different config cases

* Updating queue consumer tests

---------

Co-authored-by: Alex Holland <[email protected]>
Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>
* chore(build): point Terraform to released Go v6.3.0
* chore(zero_trust_connectivity_directory_service): cleanup leftovers

* chore(zero_trust_access_policy): cleanup duplicate test main
* chore(api_token): skip migration tests if tf_acc is not set

* chore(list): fix schema parity tests

* chore(email_routing_catch_all): fix build error

* fix(zero_trust_gateway_policy): schema parity tests
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.