chore(deps): update terraform cloudflare to v2.25.0

This MR contains the following updates:

Package	Type	Update	Change
cloudflare (source)	required_provider	minor	2.14.0 -> 2.25.0

---

Release Notes

cloudflare/terraform-provider-cloudflare

v2.25.0

Compare Source

Improvements

• resource/cloudflare_access_device_posture_rule: Add support for domain_joined, firewall, os_version, and disk_encryption (#​1137)
• provider: bump cloudflare-go to v0.20.0 (#​1146)

v2.24.0

Compare Source

Improvements

• resource/cloudflare_logpush_job: Add support for "nel_reports" as a dataset (#​1122)
• resource/cloudflare_custom_hostname: Allow SSL options to be optional when not required (#​1131)
• resource/cloudflare_access_identity_provider: Support optional Okta API token (#​1119)
• resource/cloudflare_load_balancer_pool: Add support for load shedding (#​1108)
• resource/cloudflare_load_balancer_pool: Add support for longitude and latitude (#​1093)

Fixes

• resource/cloudflare_record: Use correct Import method on resource (#​1116)
• resource/cloudflare_worker_cron_trigger: Account for deletion of scripts and force a refresh of triggers (#​1121)
• resource/cloudflare_rate_limit: Handle origin_traffic missing from API response (#​1125)
• resource/cloudflare_record: Support allow_overwrite for root records (#​1129)

v2.23.0

Compare Source

• New resource: cloudflare_waiting_room (#​1053)

Improvements

• datasource/cloudflare_waf_rules: Export default_mode as an attribute (#​1079)

Fixes

• resource/cloudflare_access_application: Revert removal of schema changes causing existing applications unable to re-apply (#​1118)

v2.22.0

Compare Source

• New resource: cloudflare_static_route (#​1098)

Improvements

• resource/cloudflare_origin_ca: Ignore decreasing requested_validity (#​1043)
• resource/waf_override: Allow rules to be optional (#​1090)
• resource/cloudflare_zone: Don't attempt to set free zone rate plans as that is already the default (#​1102)
• resource/cloudflare_access_application: Ability to set type for Applications (#​1076)
• resource/cloudflare_zone_lockdown: Update documentation to show examples of multiple configurations (#​1106)

v2.21.0

Compare Source

• New resource: cloudflare_device_posture_rule (#​1058)
• New resource: cloudflare_teams_list (#​1058)

Improvements

• provider: Update to terraform-plugin-sdk v1.17.1 (#​1035, #​1043)
• resource/cloudflare_logpush_job: Allow ownership_challenge to be optional to account for Datadog, Splunk or S3-Compatible endpoints (#​1048)
• resource/cloudflare_access_group: Add support for login_method (#​1066)
• resource/cloudflare_load_balancer: Add support for promixity based steering (#​1072)
• resource/cloudflare_access_application: Prevent bad CORS configuration when credentials and all origins are permitted (#​1073)
• resource/cloudflare_access_service_tokens: Allow configuration to manage automatic renewal when the threshold is crossed and Terraform operations are performed within the window (#​1057)
• resource/cloudflare_load_balancer_pool: Allow support for Host header settings (#​1042)

Fixes

• resource/cloudflare_access_policy: Allow empty slices in blocks when building policies (#​1034)
• resource/cloudflare_load_balancer: Fix override attributes pop_pools and region_pools referencing incorrect values causing a panic (#​1039)

v2.20.0

Compare Source

New resource: cloudflare_access_ca_certificate (#​995)

Improvements

• resource/cloudflare_access_application: Improve documentation for Import usage (#​1002)
• resource/cloudflare_logpush_job: Update documentation to reflect requirements for destination_conf to match across all uses (#​1024)
• resource/cloudflare_custom_hostname_fallback: Better handle service lag when updating existing resources by attempting retries (#​1014)
• resource/cloudflare_waf_group: Simplify error handling using inbuilt helpers (#​1015)
• resource/cloudflare_waf_rule: Simplify error handling using inbuilt helpers (#​1015)
• resource/cloudflare_waf_package: Simplify error handling using inbuilt helpers (#​1015)
• resource/cloudflare_access_group: Add support for login_method (#​1018)
• provider: Update to cloudflare-go v0.16.0 (#​1018)
• provider: Update to terraform-plugin-sdk v1.16.1 (#​1003)
• resource/cloudflare_load_balancer: Add support for rules (#​1016)

v2.19.2

Compare Source

Fixes

• resource/cloudflare_record: Address regression from 2.19.1 by checking the API response instead of the schema output for Priority (#​992)

v2.19.1

Compare Source

Fixes

• resource/cloudflare_record: Update Priority handling for MX parked records (#​986)

v2.19.0

Compare Source

Fixes

• resource/cloudflare_access_group: Fix crash when constructing a GSuite group (#​940)
• resource/cloudflare_access_policy: Make precedence required (#​941)
• resource/cloudflare_access_group: Fix crash when constructing a SAML group (#​948)
• resource/cloudflare_zone: Update Retry logic to look at an available field for passing conditions (#​973)
• resource/cloudflare_page_rule: Allow ignoring/including all query string parameters for cache_key_fields (#​975)

Improvements

• resource/cloudflare_access_policy: Enable zone and account level resources to be imported (#​956)
• resource/cloudflare_origin_ca_certificate: Smoother import process with less recreation (#​955)
• provider: Update internals to match cloudflare-go 0.14 for better error handling and context aware methods (#​976)

v2.18.0

Compare Source

• New Resource: cloudflare_argo_tunnel (#​905)
• New Resource: cloudflare_worker_cron_trigger (#​926)

Fixes

• datasource/cloudflare_zones: Pagination is now correctly handled internally and will return more than the single page of results (cloudflare/cloudflare-go#​534).
• resource/cloudflare_access_policy: Correctly handle transforming API responses to schema (#​917)
• resource/cloudflare_access_group: Correctly handle transforming API responses to schema (#​918)
• resource/cloudflare_ip_list: Ensure account ID is persisted during Import (#​916)

Improvements

• resource/cloudflare_access_application: Allow any session_duration that is time.ParseDuration compatible (#​910)
• resource/cloudflare_rate_limit: Add the ability to configure match.response.headers in rate limits (#​911)
• resource/cloudflare_access_rule: Validate IP masks within schema (#​921)

v2.17.0

Compare Source

• New Resource: cloudflare_magic_firewall_ruleset (#​884)

Fixes

• resource/cloudfare_api_token: Omitting conditions will no longer send empty arrays causing IP restriction issues and unusable tokens (#​902)

v2.16.0

Compare Source

Improvements

• resource/cloudflare_access_application: Add support for custom_deny_message and custom_deny_url values (#​895)
• resource/cloudflare_load_balancer_monitor: Add support for probe_zone for monitors (#​903)

v2.15.0

Compare Source

Improvements

• resource/cloudflare_load_balancer: Add support for session_affinity_ttl (#​882)
• resource/cloudflare_load_balancer: Add support for session_affinity_attributes (#​883)

Fixes

• resource/cloudflare_page_rule: Fixed crash during update when using custom cache key (#​894)

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box.

---

This MR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.