Skip to content

Releases: zscaler/terraform-provider-zpa

v3.3.1

19 May 06:20
v3.3.1
Compare
Choose a tag to compare

3.3.1 (May, 18 2024)

Notes

  • Release date: (May, 18 2024)
  • Supported Terraform version: v1.x

ENHACEMENTS

  • PR #455 Added new data source zpa_application_segment_by_type. The data source allows for querying of application segments by type. The application_type attribute supports the following values: BROWSER_ACCESS, INSPECT, and SECURE_REMOTE_ACCESS

Bug Fixes

  • PR #455 Fixed resource zpa_service_edge_group due to misconfiguration in the importing function.

Internal Changes

  • PR #454 - Added Support to arbitrary clouds for testing purposes

v3.3.0

19 May 04:32
v3.3.0
75a6e17
Compare
Choose a tag to compare

3.3.0 (May, 18 2024)

Notes

  • Release date: (May, 17 2024)
  • Supported Terraform version: v1.x

ENHACEMENTS

  • PR #455 Added new data source zpa_application_segment_by_type. The data source allows for querying of application segments by type. The application_type attribute supports the following values: BROWSER_ACCESS, INSPECT, and SECURE_REMOTE_ACCESS

Bug Fixes

  • PR #455 Fixed resource zpa_service_edge_group due to misconfiguration in the importing function.

Internal Changes

  • PR #454 - Added Support to arbitrary clouds for testing purposes

v3.2.11

04 May 05:48
v3.2.11
fb1a54a
Compare
Choose a tag to compare

3.2.11 (May, 3 2024)

Notes

  • Release date: (May, 3 2024)
  • Supported Terraform version: v1.x

Internal Changes

  • PR #449 - Added CodeCov Support to GitHub Workflow

Bug Fixes

  • PR #450 - Implemented additional validation within the resource zpa_policy_access_rule_reorder to ensure it accounts for the potential existence of the Zscaler Deception rule. Zscaler API Documentation for further details.

⚠️ WARNING:: This change does not affect existing rule configurations, and is only applicable for tenants with the Zscaler Deception rule configured. If your tenant have this rule configured, please refer to the provider documentation for further examples on how you can address potential drift issues due to rule order missmatch. Issue #445

ENHACEMENTS

  • PR #450 - The resource zpa_service_edge_group now supports the following new attributes:
    • grace_distance_enabled: Allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    • grace_distance_value: Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge.
    • grace_distance_value_unit: Indicates the grace distance unit of measure in miles or kilometers. This value is only required if grace_distance_enabled is set to true. Support values are: MILES and KMS

Documentation

  • PR #450 - Updated documentation for zpa_policy_access_rule_reorder by removing deprecated policy_set_id attribute from the resource. Only the policy_type is required.
  • PR #450 - Updated documentation for zpa_service_edge_group by including detailed description of the new attributes: grace_distance_enabled, grace_distance_value, grace_distance_value_unit.

v3.2.1

09 Apr 00:10
v3.2.1
Compare
Choose a tag to compare

3.2.1 (April, 8 2024)

Notes

  • Release date: (April, 8 2024)
  • Supported Terraform version: v1.x

Bug Fixes

  • PR #442 - Fixed zpa_ba_certificate resource and aligned with zpa_application_segment_browser_access certificate_id attribute.

    !> WARNING: Notice that updating the cert_blob attribute in the zpa_ba_certificate will trigger a full replacement of both the certificate and the zpa_application_segment_browser_access along with any access policy the application segment may be associated with.

v3.2.0

03 Apr 05:47
v3.2.0
Compare
Choose a tag to compare

3.2.0 (April, 3 2024)

Notes

  • Release date: (April, 3 2024)
  • Supported Terraform version: v1.x

NEW - RESOURCES, DATA SOURCES, PROPERTIES, ATTRIBUTES:

NEW RESOURCES AND DATASOURCES:

  • New datasource: zpa_pra_approval_controller retrieve Privileged Remote Access Approval PR #432
  • New resource: zpa_pra_approval_controller manages Privileged Remote Access Approval PR #432
  • New datasource: zpa_pra_portal_controller retrieve Privileged Remote Access Portal PR #432
  • New resource: zpa_pra_portal_controller manages Privileged Remote Access Portal PR #432
  • New datasource: zpa_pra_credential_controller retrieve Privileged Remote Access Credential PR #432
  • New resource: zpa_pra_credential_controller manages Privileged Remote Access Credential PR #432
  • New datasource: zpa_pra_console_controller retrieve Privileged Remote Access Console PR #432
  • New resource: zpa_pra_console_controller manages Privileged Remote Access Console
    PR #432
  • New Resources: Introduced new Policy Access resources that are managed via a new v2 API endpoint:
    • zpa_policy_access_rule_v2 manages access policy rule via v2 API endpoint PR #432

    • zpa_policy_forwarding_rule_v2 manages access policy forwarding rule via v2 API endpoint PR #432

    • zpa_policy_isolation_rule_v2 manages access policy isolation rule via v2 API endpoint PR #432

    • zpa_policy_inspection_rule_v2 manages access policy inspection rule via v2 API endpoint PR #432

    • zpa_policy_timeout_rule_v2 manages access policy timeout rule via v2 API endpoint PR #432

    • zpa_policy_redirection_rule manages redirection access policy via v2 API endpoint PR #432

    • zpa_policy_credential_rule manages access policy credential rule via v2 API endpoint PR #432

    • zpa_policy_capabilities_rule manages access policy capabilities rule via v2 API endpoint PR #432

      ⚠️ WARNING:: Notice that any Access Policy v2 is a new resource and uses a different HCL format structure. If you decide to migrate to the new v2 resources, notice that this is considered a breaking change and must be done carefully. This warning only applies for those with existing v1 Access Policy HCL format structure.

PR #434

  • New resource: zpa_emergency_access_user manages Emergency Access Users

NEW PROPERTIES

  • New Properties: The resource zpa_ba_certificate now displays the attributes valid_from_in_epochsec and valid_to_in_epochsec in human readable RFC1123 format
  • New Properties: The provider now includes support to ZPATWO cloud PR #432

DEPRECATIONS

  • Deprecated attribute: The attributes policy_migrated and tcp_keep_alive_enabled are now deprecated for the resource zpa_segment_group. For the attribute tcp_keep_alive_enabled use the attribute tcp_keep_alive within the resource zpa_application_segment", PR #432.
  • Deprecated attribute: The attributes negated within all access policy rule resource types. PR #432.
  • Deprecated attribute: The attributes rule_order within all access policy rule resource types. Please use the newly dedicated resource zpa_policy_access_rule_reorder PR #432.

ENHACEMENTS

  • Attribute policy_set_id is now optional across all access policy rule resources v1 and v2. The provider will automatically set the policy_set_id according to the policy access resource being configured. This improvement removes the need to explicitly use the data source zpa_policy_type PR #432
  • Added new match_style attribute to the zpa_application_segment resource PR #432. Issue #424. To learn more about this attribute visit Zscaler Help Portal
  • Update zpa_ba_certificate documentation PR #432
  • Several ACC tests maintenance PR #432

v3.1.1

29 Feb 06:36
v3.1.1
Compare
Choose a tag to compare

3.1.1 (February, 28 2024)

Notes

  • Release date: (February, 28 2024)
  • Supported Terraform version: v1.x

Bug Fixes

  • PR #423 - Fixed drift issue within zpa_application_segment_pra resource

v3.1.0

17 Jan 17:04
v3.1.0
Compare
Choose a tag to compare

3.1.0 (January, 17 2023)

Notes

  • Release date: (January, 17 2023)
  • Supported Terraform version: v1.x

Enhacements

  • PR #394 - ✨ Added support for ZPA Certificate provisioning
  • PR #405 - ✨ Added support for ZPA Assistant Schedule feature to configures Auto Delete for the specified disconnected App Connectors.
  • PR #389 - ✨ Added support to New ZPA Bulk Reorder Policy Rule

Fixes

  • PR #391 - Removed enrollment_cert_name computed attribute from provisioning key resource

v3.0.5

18 Nov 00:42
v3.0.5
Compare
Choose a tag to compare

3.0.5 (November, 17 2023)

Notes

  • Release date: (November, 17 2023)
  • Supported Terraform version: v1.x

Enhancements

  • PR #388 - Updated provider to zscaler-sdk-go v2.1.6 to support ZPA SCIM Group SortOrder and SortBy search criteria option

v3.0.4

07 Nov 00:37
v3.0.4
a69dc2e
Compare
Choose a tag to compare

3.0.4 (November, 6 2023)

Notes

  • Release date: (November, 6 2023)
  • Supported Terraform version: v1.x

Fixes

  • PR #385 - Fixed microtenant_id attribute for all access policy types.
    ⚠️ WARNING:: The attribute microtenant_id is optional and requires the microtenant license and feature flag enabled for the respective tenant. The provider also supports the microtenant ID configuration via the environment variable ZPA_MICROTENANT_ID which is the recommended method.
  • PR #383 - Fixed issues with hard-coded authentication within the provider block.

v3.0.3

01 Nov 17:21
v3.0.3
292278d
Compare
Choose a tag to compare

3.0.3 (November, 1 2023)

Notes

  • Release date: (November, 1 2023)
  • Supported Terraform version: v1.x

Fixes

  • PR #375 - Fixed drift issues in zpa_application_segment_pra and zpa_application_segment_inspection when setting up apps_config options.
  • PR #375 - Upgrade to Zscaler-SDK-GO v2.1.3. The upgrade allows searches for resources in which the name include 1 or more spaces.
  • PR #380 - Fixed provider authentication to accept ZPA_CLOUD via environment variables.
  • PR #381 - Included and fixed additional acceptance test cases for several resources and datasources