Releases: akamai/terraform-provider-akamai
Releases · akamai/terraform-provider-akamai
v1.8.0
1.8.0 (Oct 25, 2021)
FEATURES/ENHANCEMENTS:
- [IMPORTANT] DATASTREAM - Added DataStream configuration support
- New DataStream module. This module provides scalable, low latency streaming of property data in raw form
- New resource:
- akamai_datastream - create, read and update log streams
- New data sources:
- akamai_datastream_activation_history - list detailed information about the activation status changes for all versions of a stream
- akamai_datastream_dataset_fields - list groups of data set fields available in the template
- PAPI
- New akamai_property_rules_template data source, which lets you use JSON template files to configure a rule tree
v1.7.1
v1.7.0
1.7.0 (Aug 19, 2021)
FEATURES/ENHANCEMENTS:
-
Terraform Plugin SDK updated to v2.7.0
-
Provider tested and now supports Terraform 1.0.4
-
APPSEC
- Add wap_selected_hostnames data source and resource
- Remove import templates for deprecated features
- Display policy IDs for siem settings in separate table
- Get an evaluation attack group's or risk score group's action
-
NETWORK LISTS
- Support contract_id and group_id for network list create/update
-
PAPI
- Possibility to set
note
field in property_activation resource - Additional checks and validations in
terraform plan
(#245)
- Possibility to set
BUG FIXES:
- APPSEC
- Configuration drift on reputation_profile create/apply
- Fix incorrect comments/URL references in inline documentation
- Data source akamai_appsec_security_policy returning incorrect policy ID
- DNS
- Trim contract (ctr_) and group (grp_) prefixes when comparing configuration and TF state values (#242)
- GTM
- Trim contract (ctr_) and group (grp_) prefixes when comparing configuration and TF state values
v1.6.1
1.6.1 (Jul 21, 2021)
BUG FIXES:
- DNS
- Fixed contract id not being set in zone import and made group optional (#242)
- GTM
- Fixed documentation mismatch with optional/required fields on nested objects for
akamai_gmt_property
resource (#240)
- Fixed documentation mismatch with optional/required fields on nested objects for
- PAPI
- CPS
- Added
sans
field onakamai_cps_dv_validation
to enable resending acknowledgement on after SANS are updated
- Added
FEATURES/ENHANCEMENTS:
- CPS
akamai_cps_dv_enrollment
now acceptscontract_id
withctr_
prefix
v1.6.0
1.6.0 (June 21, 2021)
BREAKING CHANGES:
- APPSEC
- Configuration version numbers are no longer supported for most data sources and resources, as described below.
- The following data sources are no longer supported:
- akamai_appsec_attack_group_actions
- akamai_appsec_attack_group_condition_exception
- akamai_appsec_eval_rule_actions
- akamai_appsec_eval_rule_condition_exception
- akamai_appsec_rule_actions
- akamai_appsec_rule_condition_exception
- The following resources are no longer supported:
- akamai_appsec_attack_group_action
- akamai_appsec_attack_group_condition_exception
- akamai_appsec_configuration_clone
- akamai_appsec_configuration_version_clone
- akamai_appsec_eval_rule_action
- akamai_appsec_eval_rule_condition_exception
- akamai_appsec_rule_action
- akamai_appsec_rule_condition_exception
- akamai_appsec_security_policy_clone
- akamai_appsec_security_policy_protections
BUG FIXES:
- PAPI
- Fixed issue causing edgehostnames not being set properly in state intermittently
FEATURES/ENHANCEMENTS:
-
[IMPORTANT] CPS - Added Certificate Provisioning API support
- Added resources allowing management of DV enrollments:
- akamai_cps_dv_enrollment - create, read, update and delete DV enrollments
- akamai_cps_dv_validation - inform CPS of finished validation, track change status
- Added resources allowing management of DV enrollments:
-
APPSEC
- The provider now determines automatically the version number to use for data source and resource operations.
The most recent version of the specified configuration will be used if it is not currently active in either
staging or production. If the most recent version is currently active, that version will be cloned and the
newly cloned version will be used. The version attribute has been removed from all resource and data definitions,
with the exception of the following data sources:- akamai_appsec_configuration_version
- akamai_appsec_export_configuration
- The export output templates supported by the akamai_appsec_export_configuration data source have been updated
to remove version attributes. - The functionality for cloning and renaming configurations and security policies has been integrated into
the respective resources. The separate resources for cloning and renaming have been removed. The affected
elements are listed in theBREAKING CHANGES
section above. - The action and condition_exception functionality for rule, eval-rule and attack-group resources have been
consolidated into the respective data sources. The individual data sources and resources have been removed,
and the remaining ones have been renamed. The affected elements are listed in theBREAKING CHANGES
section above. - The akamai_appsec_activation resource's ForceNew attribute is no longer supported.
- Resource updates that include modifications to the config_id or security_policy_id attributes are forbidden.
- The akamai_appsec_siem_setting resource's output_text attribute is no longer supported.
- The tabular output from the export_configuration data source has been improved.
- The sample configuration file in the source repository has been updated to standardize names and remove
version attributes. - Policy protections are now set individually. The separate resources for setting individual policy_protections
resources has been removed. - The Getting Started guide for Appsec has been updated to include more information on importing resources, including
a list of the supported output templates. - The following data sources have been added:
- akamai_appsec_advanced_settings_pragma_header
- akamai_appsec_attack_groups
- akamai_appsec_eval_rules
- akamai_appsec_rules
- The following resources have been added:
- akamai_appsec_advanced_settings_pragma_header
- akamai_appsec_api_constraints_protection
- akamai_appsec_attack_group
- akamai_appsec_eval_rule
- akamai_appsec_ip_geo_protection
- akamai_appsec_rule
- The provider now determines automatically the version number to use for data source and resource operations.
-
PAPI
- New optional parameter, which allows to import a specific property version. Additional information in Property resource
v1.5.1
1.5.1 (Apr 21, 2021)
BUG FIXES:
-
APPSEC
- Suppress 'null' text on output of empty/false values
- Prevent configuration drift when reapplying configuration after importing or creating resources
- Update configuration version in local state file when modified in config.tf
- Use uppercase when managing GEO network list elements
- Display both API & website match targets in text_output
- Remove unused
output_text
from code and documentation - Set
network_list_id
on network list import - Add comments to simplify importing resources using "terraform import"
-
PAPI
- Fixed issue causing inconsistent state when activation has rule errors (#219)
- Fixed issue with
resource_akamai_property
not setting product_id during import (#224) - Rule warnings are not set in state anymore in
resource_akamai_property
andresource_akamai_property_activation
to address size concerns of state file. Users will still be able to see them in logs as warnings
-
DNS - Fix panic when zone already exists on create
-
GTM - Deprecate and ignore Property field
static_ttl
. Add warning if present in property resource config
FEATURES/ENHANCEMENTS:
- PAPI -
resource_akamai_property_activation
now allows new optional argumentauto_acknowledge_rule_warnings
. Refer to Property Activation Resource
v1.5.0
1.5.0 (Mar 30, 2021) PAPI - Secure by default integration
BREAKING CHANGES:
- PAPI -
resource_akamai_property:
Changed hostnames field to a block type syntax to support additional user inputs. Refer to Property Resource for new syntax.
Important Note
Existing terraform users with hostnames defined in older syntax need to manually fix their hostnames configuration and existing state if needed. Additional info in Property Resource
BUG FIXES:
PAPI
- Fixed issue with version attributes not being set properly (#208)
- Fixed issue with
data_akamai_property_rules_template
not interpolating#include
files properly - Fixed issue with
data_akamai_property_rules_template
not merging nested files properly
FEATURES/ENHANCEMENTS:
PAPI
- New Hostnames Datasource to query hostnames and poll certificate status
- Improved error handling and error messages in
property
andproperty_activation
resources
v1.4.0
1.4.0 (Mar 17, 2021) Network Lists
These are the operations supported in the Network Lists API v2:
- Create a network list
- Update an existing network list
- Get the existing network lists, optionally filtering by name or type
- Subscribe to a network list
- Activate a network list
v1.3.1
1.3.1 (Mar 4, 2021)
- PAPI - Fixed issue with rules causing advanced locked behaviors to fail
v1.3.0
1.3.0 (Feb 25, 2021) APPSEC - Extended list of supported list endpoints from APPSEC API
BREAKING CHANGES:
- PAPI
data_akamai_property_rules_template:
snippets files should now be placed underproperty-snippets
directory and should have.json
extension
FEATURES/ENHANCEMENTS:
- APPSEC
- Custom Deny
- SIEM Setting
- Advanced Options Settings
- API Match Target
- API Request Constraint
- Create/Delete/Rename Security Policy
- Host Coverage / Edit Version Notes
- All WAP Features / WAP Hostname Evaluation
- Create Security Configuration
- Rename Security Configuration Version
- Delete Security Configuration Version
- Clone Security Configuration
- Import tool for adding existing resources to Terraform state (#207)
- DNS
- Create SOA and NS Records on zone read if don't exist.
- Add HTTPS, SVCB record support
- GTM
- Add validation for property type and traffic targets combination
BUG FIXES:
- PAPI
- Fixed issue causing hostnames to be appended instead of being replaced
- Fixed issue causing version and rule comments being dropped (#55)
- Fixed client side validation to allow certain PAPI errors to passthrough
- Fixed issue causing incorrect property version being stored in state for certain scenarios
- DNS
- Suppress NS Record target diff if old and new equal without trailing 'period' (#189)
- Fail on attempted Zone deletion. Not supported.