Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Jan 24, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
azuread (source) required_provider major 1.6.0 -> 2.53.0

Release Notes

hashicorp/terraform-provider-azuread (azuread)

v2.53.0

Compare Source

ENHANCEMENTS:

  • azuread_application - support for the password block (#​1389)

BUG FIXES:

  • azuread_claims_mapping_policy - set the correct timeouts for this resource (#​1419)
  • azuread_service_principal_claims_mapping_policy_assignment - set the correct timeouts for this resource (#​1419)
  • azuread_synchronization_secret - set the correct timeouts for this resource (#​1419)

v2.52.0

Compare Source

BUG FIXES:

  • azuread_application - fix a bug that could prevent the ignore_changes lifecycle argument from working for the app_role, oauth2_permission_scope, identifier_uris, optional_claims, and required_resource_access properties (#​1403)
  • azuread_application - add a workaround for an API bug when instantiating an application from template using the template_id property (#​1406)

v2.51.0

Compare Source

ENHANCEMENTS:

  • data.azuread_users - support for the mails property (#​1400)

BUG FIXES:

  • azuread_access_package_assignment_policy - fix a bug preventing removal of the assignment_review_settings block (#​1394)

v2.50.0

Compare Source

ENHANCEMENTS:

  • dependencies: updating to v0.68.0 of github.com/manicminer/hamilton (#​1382)
  • data.azuread_application - support looking up applications with the identifier_uri property [GH 1303]
  • azuread_conditional_access_policy - improve handling of the session_controls block (#​1382)

BUG FIXES:

  • data.azuread_service_principal - treat the display_name property case-insensitively (#​1381)
  • azuread_conditional_access_policy - fix a bug that could cause a persistent diff when setting certain properties in the session_controls block (#​1382)
  • azuread_user - don't overwrite the existing password in state, when a password change fails (#​1308)

v2.49.1

Compare Source

BUG FIXES:

  • data.azuread_group_role_management_policy - resolve a potential crash (#​1375)
  • azuread_group_role_management_policy - resolve a number of potential crashes (#​1375)
  • azuread_privileged_access_group_assignment_schedule - resolve a number of potential crashes (#​1375)
  • azuread_privileged_access_group_eligibility_schedule - resolve a number of potential crashes (#​1375)

v2.49.0

Compare Source

FEATURES:

  • New Data Source: azuread_group_role_management_policy (#​1327)
  • New Resource: azuread_group_role_management_policy (#​1327)
  • New Resource: azuread_privileged_access_group_assignment_schedule (#​1327)
  • New Resource: azuread_privileged_access_group_eligibility_schedule (#​1327)
  • New Resource: azuread_synchronization_job_provision_on_demand (#​1032)

ENHANCEMENTS:

  • data.azuread_group - support for the include_transitive_members property (#​1300)
  • azuread_application - relax validation for the identifier_uris property to allow more values (#​1351)
  • azuread_application_identifier_uri - relax validation for the identifier_uri property to allow more values (#​1351)
  • azuread_group - support the SkipExchangeInstantOn value for the behaviors property (#​1370)
  • azuread_user - relax validation for the employee_type property to allow more values (#​1328)

BUG FIXES:

  • azuread_application_pre_authorized - fix a destroy-time bug that could prevent deletion of the resource (#​1299)

v2.48.0

Compare Source

ENHANCEMENTS:

  • dependencies: updating to v0.20240411.1104331 of github.com/hashicorp/go-azure-sdk/sdk (#​1353)

BUG FIXES:

  • provider: fix an issue where the provider was not correctly configured when using a custom metadata host (#​1353)

v2.47.0

Compare Source

BUG FIXES:

  • azuread_access_package_assignment_policy - fix a potential crash when removing the question block (#​1273)
  • data.azuread_named_location - fix a potential crash if the named location is not found (#​1274)

v2.46.0

Compare Source

ENHANCEMENTS:

  • data.azuread_application - update the resource ID format to match the azuread_application resource (#​1255)
  • azuread_named_location - add validation for the ip_ranges property in the ip block (#​1254)

v2.45.0

Compare Source

FEATURES:

  • New Resource: azuread_application_optional_claims (#​1223)

ENHANCEMENTS:

  • azuread_conditional_access_policy - improved plan-time validation for the session_controls block (#​1229)
  • azuread_conditional_access_policy - support for the sign_in_frequency_authentication_type and sign_in_frequency_interval properties in the session_controls block (#​1229)
  • azuread_conditional_access_policy - support for the included_guests_or_external_users and excluded_guests_or_external_users blocks in the users block (#​1222)

BUG FIXES:

  • azuread_conditional_access_policy - removing the devices or session_controls blocks will no longer force a new resource to be created (#​1229)

v2.44.1

Compare Source

BUG FIXES:

  • azuread_application_certificate - work around an unexpected diff with the application_object_id property (#​1221)
  • azuread_application_federated_identity_credential - work around an unexpected diff with the application_object_id property (#​1221)
  • azuread_application_password - work around an unexpected diff with the application_object_id property (#​1221)
  • azuread_application_pre_authorized - work around an unexpected diff with the application_object_id property (#​1221)

v2.44.0

Compare Source

  • Developer Note: the Typed Resource SDK, as also used in the AzureRM provider, is now the preferred way of introducing new resources (#​1188)

FEATURES:

  • New Resource: azuread_application_api_access (#​1214)
  • New Resource: azuread_application_app_role (#​1214)
  • New Resource: azuread_application_fallback_public_client (#​1214)
  • New Resource: azuread_application_from_template (#​1214)
  • New Resource: azuread_application_identifier_uri (#​1214)
  • New Resource: azuread_application_known_clients (#​1214)
  • New Resource: azuread_application_owner (#​1214)
  • New Resource: azuread_application_permission_scope (#​1214)
  • New Resource: azuread_application_redirect_uris (#​1214)
  • New Resource: azuread_application_registration (#​1214)
  • New Resource: azuread_authentication_strength_policy (#​1171)

ENHANCEMENTS:

  • data.azuread_application - export the client_id attribute, deprecate the application_id attribute (#​1214)
  • data.azuread_service_principal - support for the client_id property, deprecate the application_id property (#​1214)
  • data.azuread_service_principals - support for the client_ids property, deprecate the application_ids property (#​1214)
  • data.azuread_service_principals - export the client_id attribute in the service_principals block, deprecate the application_id attribute (#​1214)
  • azuread_application - export the client_id attribute, deprecate the application_id attribute (#​1214)
  • azuread_application_federated_identity_credential - support for the application_id property, deprecate the application_object_id property (#​1214)
  • azuread_application_certificate - support for the application_id property, deprecate the application_object_id property (#​1214)
  • azuread_application_password - support for the application_id property, deprecate the application_object_id property (#​1214)
  • azuread_application_pre_authorized - support for the application_id property, deprecate the application_object_id property (#​1214)
  • azuread_service_principal - support for the client_id property, deprecate the application_id property (#​1214)
  • azuread_conditional_access_policy - support for the authentication_strength_policy_id property in the grant_controls block [GH_1171]

BUG FIXES:

  • azuread_group_member - resolve a bug when refreshing state if the group is missing (#​1198)

v2.43.0

Compare Source

FEATURES:

  • New Resource: azuread_directory_role_eligibility_schedule_request (#​974)

v2.42.0

Compare Source

IMPROVEMENTS:

  • provider: support for the client_id_file_path and client_secret_file_path provider properties (#​1189)
  • data.azuread_group - support for looking up a group with the mail_nickname property (#​1173)

BUG FIXES:

  • azuread_conditional_access_policy - allow specifying terms_of_use in place of built_in_controls in the grant_controls block (#​1168)

v2.41.0

Compare Source

FEATURES:

  • New Data Source: azuread_directory_role_templates (#​1152)
  • New Data Source: azuread_named_location (#​1156)

IMPROVEMENTS:

  • azuread_access_package_assignment_policy - support the Manager value for the review_type property in the assignment_review_settings block (#​1159)
  • azuread_conditional_access_policy - support for the service_principal_risk_levels property in the conditions block (#​1145)
  • azuread_conditional_access_policy - the grant_controls block is now optional (#​1155)

BUG FIXES:

  • azuread_access_package_resource_package_association - support destruction of this resource (#​1124)
  • azuread_application - set the display_name property correctly on creation to improve UX in the event of failure (#​1160)

v2.40.0

Compare Source

IMPROVEMENTS:

  • dependencies: updating to v0.62.0 of github.com/manicminer/hamilton
  • data.azuread_user - supporting looking up a user using the employee_id property (#​1040)
  • data.azuread_users - supporting looking up users using the employee_ids property (#​1040)
  • azuread_conditional_access_policy - support for the client_applications block in the conditions block (#​1047)
  • azuread_conditional_access_policy - support for the disable_resilience_defaults property in the session_controls block (#​1135)
  • azuread_group - the behaviors property now supports the CalendarMemberReadOnly and ConnectorsDisabled values (#​1144)

v2.39.0

Compare Source

IMPROVEMENTS:

  • dependencies: updating to v0.20230511.1094507 of github.com/hashicorp/go-azure-sdk (#​1100)

BUG FIXES:

  • provider: fix a token refresh bug that could cause authentication errors after initial token expiry (#​1100)

v2.38.0

Compare Source

FEATURES:

  • New Data Source: azuread_access_package_catalog_role (#​1033)
  • New Resource: azuread_access_package_catalog_role_assignment (#​1033)

BUG FIXES:

  • Provider: fix an issue where API requests might not be retried correctly (#​1090)
  • azuread_service_principal_token_signing_certificate - fix a crash when importing legacy certificates (#​1082)

v2.37.2

Compare Source

BUG FIXES:

  • azuread_group - remove conditional ForceNew for the onpremises_group_type property, resolve breaking change in v2.37.1 (#​1076)
  • azuread_group - improve a workaround for reading Microsoft 365-only properties for groups in a non-M365 tenant (#​1076)
  • azuread_group - improve a workaround for detecting unwanted changes to the description property (#​1074)

v2.37.1

Compare Source

NOTES:

  • This release contains a breaking change with the azuread_group resource, in order to fix a regression. Please see #​1072 for workaround information.

BUG FIXES:

  • azuread_group - fix a regression that caused onpremises_group_type to be set when not configured, and unsetting this property now forces replacement of the resource (#​1070)

v2.37.0

Compare Source

FEATURES:

  • New Data Source: azuread_access_package (#​903)
  • New Data Source: azuread_access_package_catalog (#​903)
  • New Resource: azuread_access_package (#​903)
  • New Resource: azuread_access_package_assignment_policy (#​903)
  • New Resource: azuread_access_package_catalog (#​903)
  • New Resource: azuread_access_package_resource_catalog_association (#​903)
  • New Resource: azuread_access_package_resource_package_association (#​903)
  • New Resource: azuread_administrative_unit_role_member (#​983)
  • New Resource: azuread_user_flow_attribute (#​1063)

IMPROVEMENTS:

  • dependencies: updating to v0.60.0 of github.com/manicminer/hamilton (#​1062)
  • data.azuread_application - support for the service_management_reference attribute (#​1046)
  • data.azuread_group - support for the onpremises_group_type and writeback_enabled attributes (#​964)
  • data.azuread_user - support for the mail property (#​996)
  • azuread_application - support for the service_management_reference property (#​1046)
  • azuread_group - support for the onpremises_group_type and writeback_enabled properties (#​964)

v2.36.0

Compare Source

IMPROVEMENTS:

  • Provider: requests to Microsoft Graph no longer include the tenant ID as part of the URI path (#​1039)

BUG FIXES:

  • azuread_group - work around an API issue that prevented group creation for some configurations where the calling principal is specified as an owner (#​1037)

v2.35.0

Compare Source

BUG FIXES:

  • azuread_application_federated_identity_credential - the audiences property now only supports a single value due to a breaking API change (#​1027)
  • azuread_group - only try to set additional fields when explicitly configured, to work around an API bug when application-only permissions are used (#​1028)
  • azuread_service_principal - resolve an issue where newly created service principals might not be found when specifying use_existing = true (#​1025)

IMPROVEMENTS:

  • Provider: support for the metadata_host property (#​1026)
  • Provider: authentication now uses the github.com/hashicorp/go-azure-sdk/sdk/auth package (#​1026)
  • Provider: cloud configuration now uses the github.com/hashicorp/go-azure-sdk/sdk/environments package (#​1026)
  • data.azuread_application - support for the notes attribute (#​1027)
  • data.azuread_directory_roles - support for the template_ids attribute (#​1011)
  • azuread_application - support for the notes property (#​1027)
  • azuread_group - support for the administrative_unit_ids property (#​984)
  • azuread_synchronization_job - fix a bug where the incorrect API version was used, preventing this resource from working properly (#​1030)
  • azuread_synchronization_secret - fix a bug where the incorrect API version was used, preventing this resource from working properly (#​1030)

v2.34.1

Compare Source

BUG FIXES:

  • azuread_administrative_unit - revert to the Microsoft Graph beta API version to resolve an API error when using this resource (#​1023)
  • azuread_application - revert to the Microsoft Graph beta API version to resolve an issue preventing creation of new applications (#​1023)
  • azuread_application - revert to the Microsoft Graph beta API version to resolve an issue preventing setting the oauth2_post_response_required property (#​1023)
  • azuread_application_pre_authorized - revert to the Microsoft Graph beta API version to resolve an issue creating this resource (#​1023)
  • azuread_group - revert to the Microsoft Graph beta API version to resolve an issue when managing group members (#​1023)
  • azuread_group_member - revert to the Microsoft Graph beta API version to resolve an issue when managing group members (#​1023)
  • azuread_user - revert to the Microsoft Graph beta API version to resolve a persistent diff for the account_enabled and show_in_address_list properties (#​1023)

v2.34.0

Compare Source

IMPROVEMENTS:

  • Provider: All resources will now explicitly use the Microsoft Graph v1.0 API unless stated otherwise in the provider documentation (#​990)
  • data.azuread_application - support the description attribute (#​991)
  • azuread_application - support app role and scope values up to 249 characters (#​1010)

BUG FIXES:

  • Provider: Support authentication scenarios where the oid claim is missing from the access token (#​1014)
  • data.azuread_application_template - revert a workaround from v2.31.0 and no longer use the beta API for this data source (#​987)
  • azuread_application - work around an API bug where mapped_claims_enabled could be set on create when holding the Application.ReadWrite.OwnedBy role (#​1008)

v2.33.0

Compare Source

FEATURES:

  • New Resource: azuread_service_principal_token_signing_certificate (#​968)

IMPROVEMENTS:

  • azuread_application - support the description property (#​977)

BUG FIXES:

  • azuread_service_principal_delegated_permission_grant - fix a bug that caused state refreshes to fail if the resource is edited outside Terraform (#​981)
  • azuread_group - fix a validation bug to allow periods (.) in the mail_nickname property (#​979)
  • azuread_group - fix a bug that prevents replacing a group when prevent_duplicate_names = true (#​980)
  • azuread_group - set the display_name property correctly on creation so that triggered notification emails are correct (#​982)

v2.32.0

Compare Source

FEATURES:

  • New Data Source: azuread_directory_roles (#​945)

IMPROVEMENTS:

  • azuread_application - support the cloud_displayname optional claim (#​967)

BUG FIXES:

  • azuread_application - improve validation when checking for duplicate app roles and permission scopes (#​971)

v2.31.0

Compare Source

IMPROVEMENTS:

  • azuread_application - validation for identifier_uris to detect trailing slash with no path (#​928)

BUG FIXES:

  • data.azuread_application_template - work around an API bug in the US Government cloud, by using the beta API (#​936)
  • azuread_application - fix a bug where owners where not correctly removed (#​916)
  • azuread_application - work around an API bug in the US Government cloud, by using the beta API when template_id is specified (#​936)

v2.30.0

Compare Source

FEATURES:

  • New Resource: azuread_synchronization_job (#​830)
  • New Resource: azuread_synchronization_secret (#​830)

v2.29.0

Compare Source

IMPROVEMENTS:

  • Provider: support for the oidc_token_file_path property & ARM_OIDC_TOKEN_FILE_PATH environment variable (#​897)
  • data.azuread_service_principal - this resource now makes use of the MS Graph v1.0 API instead of the beta API (#​896)
  • azuread_service_principal - this resource now makes use of the MS Graph v1.0 API instead of the beta API (#​896)

v2.28.1

Compare Source

BUG FIXES:

  • Provider: fix a bug that could cause GitHub OIDC authentication to fail (#​876)

v2.28.0

Compare Source

FEATURES

  • Provider: support for generic OIDC authentication providers (#​874)
  • New Data Source: azuread_directory_object (#​847)

IMPROVEMENTS:

  • azuread_application - support max_size_limit as a value for the additional_properties property in the optional_claims block (#​864)

v2.27.0

Compare Source

NOTES:

  • This release contains a behavioral change for application/service principal passwords and certificates, when using a relative end date.

BUG FIXES:

  • data.azuread_group - ensure security/mail enabled groups are excluded when explicitly false in config (#​841)
  • azuread_application_certificate - calculate end_date_relative from the start_date and not the current timestamp (#​844)
  • azuread_application_password - calculate end_date_relative from the start_date and not the current timestamp (#​844)
  • azuread_service_principal_certificate - calculate end_date_relative from the start_date and not the current timestamp (#​844)
  • azuread_service_principal_password - calculate end_date_relative from the start_date and not the current timestamp (#​844)

v2.26.1

Compare Source

BUG FIXES:

  • azuread_directory_role_assignment - fix a bug that required directory_scope_id to be set for unscoped assignments (#​840)

v2.26.0

Compare Source

IMPROVEMENTS:

  • azuread_directory_role_assignment - deprecate the app_scope_object_id property in favor of the app_scope_id property (#​837)
  • azuread_directory_role_assignment - deprecate the directory_scope_object_id property in favor of the directory_scope_id property (#​837)

BUG FIXES:

  • azuread_directory_role_assignment - fix incorrect schema validation for scoped role assignments (#​837)
  • azuread_directory_role_assignment - fix a bug that was preventing the creation of some scoped role assignments (#​837)
  • azuread_group - fix a bug where new group creation can error out before the timeout due to API inconsistency (#​838)
  • azuread_user - only set show_in_address_list when changed in config as it is a potentially read-only attribute (#​831)

v2.25.0

Compare Source

FEATURES:

  • New Resource: azuread_directory_role_assignment (deprecates the azuread_directory_role_member resource) (#​826)

v2.24.0

Compare Source

BUG FIXES:

  • Provider: Fix a bug causing GitHub OIDC authentication to fail when consuming default environment variables (#​822)

v2.23.0

Compare Source

FEATURES:

  • New Authentication Method: Support for authenticating via OIDC with GitHub Actions (#​805)

IMPROVEMENTS:

  • azuread_user - allow changing the user_principal_name property without recreating the user account (#​815)

BUG FIXES:

  • Provider: Fix an Azure CLI authentication issue that could fail to autodetect the current tenant ID (#​819)
  • azuread_application_federated_identity_credential - fix overly restrictive validation for the audiences property (#​808)
  • azuread_group - fix a bug that could cause a crash when creating unified groups (#​816)

v2.22.0

Compare Source

IMPROVEMENTS:

  • data.azuread_groups - support the ignore_missing property (#​783)
  • azuread_conditional_access_policy - support linux in the included_platforms and excluded_platforms properties (#​784)
  • azuread_group - support the SubscribeMembersToCalendarEventsDisabled value in the behaviors property (#​785)

BUG FIXES:

  • data.azuread_service_principal - raise an error when multiple results are found for the same display_name (#​781)
  • azuread_group - ensure that unified groups can be created without a description (#​783)

v2.21.0

Compare Source

BUG FIXES:

  • azuread_conditional_access_policy - the included_applications property in the conditions block is now optional (#​775)
  • azuread_conditional_access_policy - the locations and platforms blocks are now optional (#​775)

v2.20.0

Compare Source

FEATURES:

  • New Resource: azuread_claims_mapping_policy (#​733) (#​766)
  • New Resource: azuread_service_principal_claims_mapping_policy_assignment (#​733) (#​766)

v2.19.1

Compare Source

BUG FIXES:

  • azuread_application - revert an earlier change for validation of role/scope values (#​756)

v2.19.0

Compare Source

IMPROVEMENTS:

  • data.azuread_service_principals - export the object_id property in the service_principals list (#​749)

BUG FIXES:

  • azuread_application - add a missing validation check for role/scope values (#​750)
  • azuread_conditional_access_policy - fix a crash during the plan phase when session_controls is empty (#​747)

v2.18.0

Compare Source

BUG FIXES:

  • azuread_group - make the auto_subscribe_new_members, external_senders_allowed, hide_from_address_lists and hide_from_outlook_clients properties Computed to avoid setting them unnecessarily (#​731)

v2.17.0

Compare Source

FEATURES:

  • New Resource: azuread_custom_directory_role (#​728)

v2.16.0

Compare Source

IMPROVEMENTS:

  • data.azuread_group - support for the allow_external_senders, auto_subscribe_new_members, hide_from_address_lists and hide_from_outlook_clients attributes (#​723)
  • azuread_group - support for the allow_external_senders, auto_subscribe_new_members, hide_from_address_lists and hide_from_outlook_clients properties (#​723)

v2.15.0

Compare Source

IMPROVEMENTS:

  • data.azuread_group - support the display_name_prefix property (#​716)

BUG FIXES:

  • azuread_application - remove an unnecessary API call that may require additional permissions, when assigning owners (#​713)
  • azuread_service_principal - remove an unnecessary API call that may require additional permissions, when assigning owners (#​713)

v2.14.0

Compare Source

FEATURES:

  • New Resource: azuread_application_federated_identity_credential (#​705)

IMPROVEMENTS:

  • azuread_service_principal_password: re-add support for display_name, start_date, end_date and end_date_relative properties (#​706)

v2.13.0

Compare Source

IMPROVEMENTS:

  • azuread_group: support for dynamic_memberships (#​695)

v2.12.0

Compare Source

IMPROVEMENTS:

  • azuread_conditional_access_policy - support the persistent_browser_mode in the session_controls block (#​677)

BUG FIXES:

  • azuread_application - allow URNs to be used in redirect_uris in the public_client block (#​684)
  • azuread_service_principal_delegated_permission_grant - add missing support for importing this resource (#​685)

v2.11.0

Compare Source

BREAKING CHANGES:

FEATURES:

  • New Data Source: azuread_administrative_unit (#​672)
  • New Resource: azuread_administrative_unit (#​672)
  • New Resource: azuread_administrative_unit_member (#​672)
  • New Resource: azuread_service_principal_delegated_permission_grant (#​676)

IMPROVEMENTS:

  • azuread_conditional_access_policy - support the devices block (#​673)

BUG FIXES:

  • azuread_conditional_access_policy - fix a bug when removing the session_controls block from a policy (#​673)

v2.10.0

Compare Source

BUG FIXES:

  • azuread_group - fix a bug that prevented removing all members of a group (#​666)

v2.9.0

Compare Source

BUG FIXES:

  • Provider: fix an authentication bug that prevented authorizing using a Managed Identity when running in Azure Cloud Shell (#​660)
  • data.azuread_user - ensure apostrophes are correctly quoted when matching by mail_nickname or user_principal_name (#​643)
  • data.azuread_users - ensure apostrophes are correctly quoted when matching by mail_nicknames or user_principal_names (#​643)
  • azuread_application_certificate - work around an API consistency issue when deleting resources (#​659)
  • azuread_application_password - work around an API consistency issue when deleting resources (#​659)
  • azuread_application - add mitigation for replication delay when creating new applications (#​656)
  • azuread_directory_role_member - work around an API consistency issue when deleting resources (#​659)
  • azuread_group_member - work around an API consistency issue when deleting resources (#​659)
  • azuread_group - add mitigation for replication delay when creating new groups (#​656)
  • azuread_group - work around an API consistency issue when creating and deleting resources (#​659)
  • azuread_invitation - work around an API consistency issue when creating and deleting resources (#​659)
  • azuread_service_principal_certificate - work around an API consistency issue when deleting resources (#​659)
  • azuread_service_principal_password - work around an API consistency issue when deleting resources (#​659)
  • azuread_service_principal - add mitigation for replication delay when creating new service principals (#​656)
  • azuread_service_principal - work around an API consistency issue when creating and deleting resources (#​659)
  • azuread_user - add mitigation for replication delay when creating new users (#​656)
  • azuread_user - work around an API consistency issue when deleting resources (#​659)

v2.8.0

Compare Source

BUG FIXES:

  • azuread_application - allow custom URI schemes for public client redirect URIs (#​647)
  • azuread_group - ensure mail_nickname is set for all groups when specified in configuration (#​645)

v2.7.0

Compare Source

IMPROVEMENTS:

  • Provider: log the claims from access tokens for improved debugging ability (#​623)
  • azuread_user - support for the manager_id property (#​628)
  • azuread_application - support for the feature_tags block and the tags property (#​630)
  • azuread_service_principal - the features block has been deprecated in favour of the feature_tags for clarity (#​630)

v2.6.0

Compare Source

IMPROVEMENTS:


Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@hmcts-jenkins-j-to-z
Copy link

Plan Result

⚠️ Resource Deletion will happen ⚠️

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 3 to add, 10 to change, 3 to destroy.
  • Create
    • module.nfdiv-fail-action-group-slack.azurerm_resource_group_template_deployment.action-group
    • module.nfdiv-fail-alert.azurerm_resource_group_template_deployment.custom_alert[0]
    • module.nfdiv-migration-alert.azurerm_resource_group_template_deployment.custom_alert[0]
  • Update
    • azurerm_key_vault_secret.AZURE_APPINSIGHTS_KEY
    • azurerm_key_vault_secret.AZURE_APPINSIGHTS_KEY_PREVIEW[0]
    • azurerm_key_vault_secret.nfdiv_case_api_s2s_secret
    • azurerm_key_vault_secret.nfdiv_frontend_s2s_secret
    • azurerm_resource_group.rg
    • module.application_insights.azurerm_application_insights.this
    • module.application_insights_preview[0].azurerm_application_insights.this
    • module.key-vault.azurerm_key_vault.kv
    • module.key-vault.azurerm_key_vault_access_policy.creator_access_policy
    • module.key-vault.azurerm_key_vault_access_policy.product_team_access_policy
  • Delete
    • module.nfdiv-fail-action-group-slack.azurerm_template_deployment.action-group
    • module.nfdiv-fail-alert.azurerm_template_deployment.custom_alert[0]
    • module.nfdiv-migration-alert.azurerm_template_deployment.custom_alert[0]
Change Result (Click me)
  # azurerm_key_vault_secret.AZURE_APPINSIGHTS_KEY will be updated in-place
  ~ resource "azurerm_key_vault_secret" "AZURE_APPINSIGHTS_KEY" {
        id                      = "https://nfdiv-aat.vault.azure.net/secrets/AppInsightsInstrumentationKey/f267863a2feb443ab495f1f014d67006"
        name                    = "AppInsightsInstrumentationKey"
        tags                    = {}
        # (6 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.AZURE_APPINSIGHTS_KEY_PREVIEW[0] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "AZURE_APPINSIGHTS_KEY_PREVIEW" {
        id                      = "https://nfdiv-aat.vault.azure.net/secrets/AppInsightsInstrumentationKey-Preview/8746a580186449869dedae2b7a58aa66"
        name                    = "AppInsightsInstrumentationKey-Preview"
        tags                    = {}
        # (6 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.nfdiv_case_api_s2s_secret will be updated in-place
  ~ resource "azurerm_key_vault_secret" "nfdiv_case_api_s2s_secret" {
        id                      = "https://nfdiv-aat.vault.azure.net/secrets/s2s-case-api-secret/8160f6d75ca5471487470554133e9012"
        name                    = "s2s-case-api-secret"
        tags                    = {}
        # (6 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.nfdiv_frontend_s2s_secret will be updated in-place
  ~ resource "azurerm_key_vault_secret" "nfdiv_frontend_s2s_secret" {
        id                      = "https://nfdiv-aat.vault.azure.net/secrets/frontend-secret/096eae4f972348d681d9af10c821e4dd"
        name                    = "frontend-secret"
        tags                    = {}
        # (6 unchanged attributes hidden)
    }

  # azurerm_resource_group.rg will be updated in-place
  ~ resource "azurerm_resource_group" "rg" {
        id       = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat"
        name     = "nfdiv-aat"
      ~ tags     = {
          - "BuiltFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git" -> null
            "application"         = "no-fault-divorce"
          + "autoShutdown"        = "true"
          + "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
          - "changeUrl"           = "" -> null
          ~ "contactSlackChannel" = "#no-fault-divorce-tech" -> "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
        # (1 unchanged attribute hidden)
    }

  # module.application_insights.azurerm_application_insights.this will be updated in-place
  ~ resource "azurerm_application_insights" "this" {
      ~ daily_data_cap_in_gb                  = 100 -> 50
        id                                    = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Insights/components/nfdiv-appinsights-aat"
        name                                  = "nfdiv-appinsights-aat"
      ~ tags                                  = {
          - "BuiltFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git" -> null
            "application"         = "no-fault-divorce"
          + "autoShutdown"        = "true"
          + "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
          - "changeUrl"           = "" -> null
          ~ "contactSlackChannel" = "#no-fault-divorce-tech" -> "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
      + workspace_id                          = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/oms-automation/providers/Microsoft.OperationalInsights/workspaces/hmcts-nonprod"
        # (14 unchanged attributes hidden)
    }

  # module.application_insights_preview[0].azurerm_application_insights.this will be updated in-place
  ~ resource "azurerm_application_insights" "this" {
      ~ daily_data_cap_in_gb                  = 100 -> 50
        id                                    = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Insights/components/nfdiv-appinsights-preview"
        name                                  = "nfdiv-appinsights-preview"
      ~ tags                                  = {
          - "BuiltFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git" -> null
            "application"         = "no-fault-divorce"
          + "autoShutdown"        = "true"
          + "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
          - "changeUrl"           = "" -> null
          ~ "contactSlackChannel" = "#no-fault-divorce-tech" -> "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
      + workspace_id                          = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/oms-automation/providers/Microsoft.OperationalInsights/workspaces/hmcts-nonprod"
        # (14 unchanged attributes hidden)
    }

  # module.key-vault.azurerm_key_vault.kv will be updated in-place
  ~ resource "azurerm_key_vault" "kv" {
        id                              = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.KeyVault/vaults/nfdiv-aat"
        name                            = "nfdiv-aat"
      ~ tags                            = {
          - "BuiltFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git" -> null
            "application"         = "no-fault-divorce"
          + "autoShutdown"        = "true"
          + "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
          - "changeUrl"           = "" -> null
          ~ "contactSlackChannel" = "#no-fault-divorce-tech" -> "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
        # (13 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # module.key-vault.azurerm_key_vault_access_policy.creator_access_policy will be updated in-place
  ~ resource "azurerm_key_vault_access_policy" "creator_access_policy" {
        id                      = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.KeyVault/vaults/nfdiv-aat/objectId/ca6d5085-485a-417d-8480-c3cefa29df31"
      ~ key_permissions         = [
            # (13 unchanged elements hidden)
            "Verify",
          + "GetRotationPolicy",
        ]
        # (6 unchanged attributes hidden)
    }

  # module.key-vault.azurerm_key_vault_access_policy.product_team_access_policy will be updated in-place
  ~ resource "azurerm_key_vault_access_policy" "product_team_access_policy" {
      ~ certificate_permissions = [
            # (10 unchanged elements hidden)
            "DeleteIssuers",
          + "Recover",
        ]
        id                      = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.KeyVault/vaults/nfdiv-aat/objectId/f2ef9d16-488a-4b84-b433-3eb4225923cb"
      ~ key_permissions         = [
            # (4 unchanged elements hidden)
            "Delete",
          + "Recover",
        ]
      ~ secret_permissions      = [
            # (2 unchanged elements hidden)
            "Delete",
          + "Recover",
        ]
        # (4 unchanged attributes hidden)
    }

  # module.nfdiv-fail-action-group-slack.azurerm_resource_group_template_deployment.action-group will be created
  + resource "azurerm_resource_group_template_deployment" "action-group" {
      + deployment_mode     = "Incremental"
      + id                  = (known after apply)
      + name                = "NFDIV_slack"
      + output_content      = (known after apply)
      + parameters_content  = (sensitive value)
      + resource_group_name = "nfdiv-aat"
      + template_content    = jsonencode(
            {
              + "$schema"      = "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#"
              + contentVersion = "1.0.0.0"
              + parameters     = {
                  + actionGroupName      = {
                      + type = "string"
                    }
                  + emailReceiverAddress = {
                      + metadata = {
                          + description = "Email address of the receiver"
                        }
                      + type     = "string"
                    }
                  + emailReceiverName    = {
                      + metadata = {
                          + description = "Name of the email receiver"
                        }
                      + type     = "string"
                    }
                  + location             = {
                      + defaultValue = "global"
                      + type         = "string"
                    }
                  + shortName            = {
                      + type = "string"
                    }
                }
              + resources      = [
                  + {
                      + apiVersion = "2017-04-01"
                      + location   = "[parameters('location')]"
                      + name       = "[parameters('actionGroupName')]"
                      + properties = {
                          + emailReceivers   = [
                              + {
                                  + emailAddress = "[parameters('emailReceiverAddress')]"
                                  + name         = "[parameters('emailReceiverName')]"
                                },
                            ]
                          + enabled          = true
                          + groupShortName   = "[parameters('shortName')]"
                          + smsReceivers     = []
                          + webhookReceivers = []
                        }
                      + tags       = {}
                      + type       = "microsoft.insights/actionGroups"
                    },
                ]
            }
        )
    }

  # module.nfdiv-fail-action-group-slack.azurerm_template_deployment.action-group will be destroyed
  # (because azurerm_template_deployment.action-group is not in configuration)
  - resource "azurerm_template_deployment" "action-group" {
      - deployment_mode     = "Incremental" -> null
      - id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Resources/deployments/NFDIV_slack_aat" -> null
      - name                = "NFDIV_slack_aat" -> null
      - outputs             = {} -> null
      - parameters          = {
          - "actionGroupName"      = "NFDIV Fail Slack Alert - aat"
          - "emailReceiverAddress" = "no-fault-divorce-moni-aaaafali3ep7d55ec2d5ddsleq@hmcts-dts.slack.com"
          - "emailReceiverName"    = "NFDIV Alerts"
          - "location"             = "global"
          - "shortName"            = "NFDIV_slack"
        } -> null
      - resource_group_name = "nfdiv-aat" -> null
      - template_body       = jsonencode(
            {
              - "$schema"      = "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#"
              - contentVersion = "1.0.0.0"
              - parameters     = {
                  - actionGroupName      = {
                      - type = "string"
                    }
                  - emailReceiverAddress = {
                      - metadata = {
                          - description = "Email address of the receiver"
                        }
                      - type     = "string"
                    }
                  - emailReceiverName    = {
                      - metadata = {
                          - description = "Name of the email receiver"
                        }
                      - type     = "string"
                    }
                  - location             = {
                      - defaultValue = "global"
                      - type         = "string"
                    }
                  - shortName            = {
                      - type = "string"
                    }
                }
              - resources      = [
                  - {
                      - apiVersion = "2017-04-01"
                      - location   = "[parameters('location')]"
                      - name       = "[parameters('actionGroupName')]"
                      - properties = {
                          - emailReceivers   = [
                              - {
                                  - emailAddress = "[parameters('emailReceiverAddress')]"
                                  - name         = "[parameters('emailReceiverName')]"
                                },
                            ]
                          - enabled          = true
                          - groupShortName   = "[parameters('shortName')]"
                          - smsReceivers     = []
                          - webhookReceivers = []
                        }
                      - tags       = {}
                      - type       = "microsoft.insights/actionGroups"
                    },
                ]
            }
        ) -> null
    }

  # module.nfdiv-fail-alert.azurerm_resource_group_template_deployment.custom_alert[0] will be created
  + resource "azurerm_resource_group_template_deployment" "custom_alert" {
      + deployment_mode     = "Incremental"
      + id                  = (known after apply)
      + name                = "nfdiv-fail-alert"
      + output_content      = (known after apply)
      + parameters_content  = jsonencode(
            {
              + actionGroupName          = {
                  + value = "NFDIV Fail Slack Alert - aat"
                }
              + actionGroupRg            = {
                  + value = "nfdiv-aat"
                }
              + alertDesc                = {
                  + value = "Triggers when an NFDIV exception is received in a 5 minute poll."
                }
              + alertName                = {
                  + value = "nfdiv-fail-alert"
                }
              + appInsightsName          = {
                  + value = "nfdiv-appinsights-aat"
                }
              + appInsightsQuery         = {
                  + value = "requests | where toint(resultCode) >= 400 | sort by timestamp desc"
                }
              + commonTags               = {
                  + value = "eyJhcHBsaWNhdGlvbiI6Im5vLWZhdWx0LWRpdm9yY2UiLCJhdXRvU2h1dGRvd24iOiJ0cnVlIiwiYnVpbHRGcm9tIjoiaHR0cHM6Ly9naXRodWIuY29tL0hNQ1RTL25mZGl2LXNoYXJlZC1pbmZyYXN0cnVjdHVyZS5naXQiLCJidXNpbmVzc0FyZWEiOiJDRlQiLCJjb250YWN0U2xhY2tDaGFubmVsIjoiI25vLWZhdWx0LWRpdm9yY2UiLCJlbnZpcm9ubWVudCI6InN0YWdpbmciLCJtYW5hZ2VkQnkiOiJObyBGYXVsdCBEaXZvcmNlIn0="
                }
              + customEmailSubject       = {
                  + value = "NFDIV Service Exception"
                }
              + frequencyInMinutes       = {
                  + value = "15"
                }
              + location                 = {
                  + value = "West Europe"
                }
              + severityLevel            = {
                  + value = "3"
                }
              + timeWindowInMinutes      = {
                  + value = "15"
                }
              + triggerThreshold         = {
                  + value = "0"
                }
              + triggerThresholdOperator = {
                  + value = "GreaterThan"
                }
            }
        )
      + resource_group_name = "nfdiv-aat"
      + template_content    = jsonencode(
            {
              + "$schema"      = "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#"
              + contentVersion = "1.0.0.0"
              + parameters     = {
                  + actionGroupName          = {
                      + type = "string"
                    }
                  + actionGroupRg            = {
                      + type = "string"
                    }
                  + alertDesc                = {
                      + type = "string"
                    }
                  + alertName                = {
                      + type = "string"
                    }
                  + appInsightsName          = {
                      + type = "string"
                    }
                  + appInsightsQuery         = {
                      + type = "string"
                    }
                  + commonTags               = {
                      + type = "string"
                    }
                  + customEmailSubject       = {
                      + type = "string"
                    }
                  + frequencyInMinutes       = {
                      + defaultValue = "5"
                      + type         = "string"
                    }
                  + location                 = {
                      + type = "string"
                    }
                  + severityLevel            = {
                      + defaultValue = "3"
                      + type         = "string"
                    }
                  + timeWindowInMinutes      = {
                      + defaultValue = "5"
                      + type         = "string"
                    }
                  + triggerThreshold         = {
                      + type = "string"
                    }
                  + triggerThresholdOperator = {
                      + allowedValues = [
                          + "GreaterThan",
                          + "Equal",
                          + "LessThan",
                        ]
                      + defaultValue  = "GreaterThan"
                      + type          = "string"
                    }
                }
              + resources      = [
                  + {
                      + apiVersion = "2017-09-01-preview"
                      + location   = "[parameters('location')]"
                      + name       = "[parameters('alertName')]"
                      + properties = {
                          + action      = {
                              + aznsAction   = {
                                  + actionGroup  = [
                                      + "[resourceId(parameters('actionGroupRg'), 'microsoft.insights/actionGroups', parameters('actionGroupName'))]",
                                    ]
                                  + emailSubject = "[parameters('customEmailSubject')]"
                                }
                              + "odata.type" = "Microsoft.WindowsAzure.Management.Monitoring.Alerts.Models.Microsoft.AppInsights.Nexus.DataContracts.Resources.ScheduledQueryRules.AlertingAction"
                              + severity     = "[parameters('severityLevel')]"
                              + status       = "Active"
                              + trigger      = {
                                  + consecutiveBreach = 1
                                  + threshold         = "[parameters('triggerThreshold')]"
                                  + thresholdOperator = "[parameters('triggerThresholdOperator')]"
                                }
                            }
                          + description = "[parameters('alertDesc')]"
                          + enabled     = "true"
                          + schedule    = {
                              + frequencyInMinutes  = "[parameters('frequencyInMinutes')]"
                              + timeWindowInMinutes = "[parameters('timeWindowInMinutes')]"
                            }
                          + skuType     = "L1"
                          + source      = {
                              + dataSourceId = "[resourceId('microsoft.insights/components', parameters('appInsightsName'))]"
                              + query        = "[parameters('appInsightsQuery')]"
                              + queryType    = "ResultCount"
                            }
                        }
                      + tags       = "[union(variables('tags'), variables('additionalTags'))]"
                      + type       = "microsoft.insights/scheduledqueryrules"
                    },
                ]
              + variables      = {
                  + additionalTags = {
                      + "[concat('hidden-link:', resourceId('microsoft.insights/components', parameters('appInsightsName')))]" = "Resource"
                    }
                  + tags           = "[base64ToJson(parameters('commonTags'))]"
                }
            }
        )
    }

  # module.nfdiv-fail-alert.azurerm_template_deployment.custom_alert[0] will be destroyed
  # (because azurerm_template_deployment.custom_alert is not in configuration)
  - resource "azurerm_template_deployment" "custom_alert" {
      - deployment_mode     = "Incremental" -> null
      - id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Resources/deployments/nfdiv-fail-alert" -> null
      - name                = "nfdiv-fail-alert" -> null
      - outputs             = {} -> null
      - parameters          = {
          - "actionGroupName"          = "NFDIV Fail Slack Alert - aat"
          - "actionGroupRg"            = "nfdiv-aat"
          - "alertDesc"                = "Triggers when an NFDIV exception is received in a 5 minute poll."
          - "alertName"                = "nfdiv-fail-alert"
          - "appInsightsName"          = "nfdiv-appinsights-aat"
          - "appInsightsQuery"         = "requests | where toint(resultCode) >= 400 | sort by timestamp desc"
          - "commonTags"               = "eyJCdWlsdEZyb20iOiJodHRwczovL2dpdGh1Yi5jb20vSE1DVFMvbmZkaXYtc2hhcmVkLWluZnJhc3RydWN0dXJlLmdpdCIsImFwcGxpY2F0aW9uIjoibm8tZmF1bHQtZGl2b3JjZSIsImJ1c2luZXNzQXJlYSI6IkNGVCIsImNoYW5nZVVybCI6IiIsImNvbnRhY3RTbGFja0NoYW5uZWwiOiIjbm8tZmF1bHQtZGl2b3JjZS10ZWNoIiwiZW52aXJvbm1lbnQiOiJzdGFnaW5nIiwibWFuYWdlZEJ5IjoiTm8gRmF1bHQgRGl2b3JjZSJ9"
          - "customEmailSubject"       = "NFDIV Service Exception"
          - "frequencyInMinutes"       = "15"
          - "location"                 = "westeurope"
          - "severityLevel"            = "3"
          - "timeWindowInMinutes"      = "15"
          - "triggerThreshold"         = "0"
          - "triggerThresholdOperator" = "GreaterThan"
        } -> null
      - resource_group_name = "nfdiv-aat" -> null
      - template_body       = jsonencode(
            {
              - "$schema"      = "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#"
              - contentVersion = "1.0.0.0"
              - parameters     = {
                  - actionGroupName          = {
                      - type = "string"
                    }
                  - actionGroupRg            = {
                      - type = "string"
                    }
                  - alertDesc                = {
                      - type = "string"
                    }
                  - alertName                = {
                      - type = "string"
                    }
                  - appInsightsName          = {
                      - type = "string"
                    }
                  - appInsightsQuery         = {
                      - type = "string"
                    }
                  - commonTags               = {
                      - type = "string"
                    }
                  - customEmailSubject       = {
                      - type = "string"
                    }
                  - frequencyInMinutes       = {
                      - defaultValue = "5"
                      - type         = "string"
                    }
                  - location                 = {
                      - type = "string"
                    }
                  - severityLevel            = {
                      - defaultValue = "3"
                      - type         = "string"
                    }
                  - timeWindowInMinutes      = {
                      - defaultValue = "5"
                      - type         = "string"
                    }
                  - triggerThreshold         = {
                      - type = "string"
                    }
                  - triggerThresholdOperator = {
                      - allowedValues = [
                          - "GreaterThan",
                          - "Equal",
                          - "LessThan",
                        ]
                      - defaultValue  = "GreaterThan"
                      - type          = "string"
                    }
                }
              - resources      = [
                  - {
                      - apiVersion = "2017-09-01-preview"
                      - location   = "[parameters('location')]"
                      - name       = "[parameters('alertName')]"
                      - properties = {
                          - action      = {
                              - aznsAction   = {
                                  - actionGroup  = [
                                      - "[resourceId(parameters('actionGroupRg'), 'microsoft.insights/actionGroups', parameters('actionGroupName'))]",
                                    ]
                                  - emailSubject = "[parameters('customEmailSubject')]"
                                }
                              - "odata.type" = "Microsoft.WindowsAzure.Management.Monitoring.Alerts.Models.Microsoft.AppInsights.Nexus.DataContracts.Resources.ScheduledQueryRules.AlertingAction"
                              - severity     = "[parameters('severityLevel')]"
                              - status       = "Active"
                              - trigger      = {
                                  - consecutiveBreach = 1
                                  - threshold         = "[parameters('triggerThreshold')]"
                                  - thresholdOperator = "[parameters('triggerThresholdOperator')]"
                                }
                            }
                          - description = "[parameters('alertDesc')]"
                          - enabled     = "true"
                          - schedule    = {
                              - frequencyInMinutes  = "[parameters('frequencyInMinutes')]"
                              - timeWindowInMinutes = "[parameters('timeWindowInMinutes')]"
                            }
                          - skuType     = "L1"
                          - source      = {
                              - dataSourceId = "[resourceId('microsoft.insights/components', parameters('appInsightsName'))]"
                              - query        = "[parameters('appInsightsQuery')]"
                              - queryType    = "ResultCount"
                            }
                        }
                      - tags       = "[union(variables('tags'), variables('additionalTags'))]"
                      - type       = "microsoft.insights/scheduledqueryrules"
                    },
                ]
              - variables      = {
                  [31m- additionalTags = {
                      - "[concat('hidden-link:', resourceId('microsoft.insights/components', parameters('appInsightsName')))]" = "Resource"
                    }
                  - tags           = "[base64ToJson(parameters('commonTags'))]"
                }
            }
        ) -> null
    }

  # module.nfdiv-migration-alert.azurerm_resource_group_template_deployment.custom_alert[0] will be created
  + resource "azurerm_resource_group_template_deployment" "custom_alert" {
      + deployment_mode     = "Incremental"
      + id                  = (known after apply)
      + name                = "nfdiv-migration-alert"
      + output_content      = (known after apply)
      + parameters_content  = jsonencode(
            {
              + actionGroupName          = {
                  + value = "NFDIV Fail Slack Alert - aat"
                }
              + actionGroupRg            = {
                  + value = "nfdiv-aat"
                }
              + alertDesc                = {
                  + value = "Triggers when a migration fails."
                }
              + alertName                = {
                  + value = "nfdiv-migration-alert"
                }
              + appInsightsName          = {
                  + value = "nfdiv-appinsights-aat"
                }
              + appInsightsQuery         = {
                  + value = "traces | where message contains \"Setting dataVersion to 0 for case id\" | sort by timestamp desc"
                }
              + commonTags               = {
                  + value = "eyJhcHBsaWNhdGlvbiI6Im5vLWZhdWx0LWRpdm9yY2UiLCJhdXRvU2h1dGRvd24iOiJ0cnVlIiwiYnVpbHRGcm9tIjoiaHR0cHM6Ly9naXRodWIuY29tL0hNQ1RTL25mZGl2LXNoYXJlZC1pbmZyYXN0cnVjdHVyZS5naXQiLCJidXNpbmVzc0FyZWEiOiJDRlQiLCJjb250YWN0U2xhY2tDaGFubmVsIjoiI25vLWZhdWx0LWRpdm9yY2UiLCJlbnZpcm9ubWVudCI6InN0YWdpbmciLCJtYW5hZ2VkQnkiOiJObyBGYXVsdCBEaXZvcmNlIn0="
                }
              + customEmailSubject       = {
                  + value = "NFDIV Migration Failed"
                }
              + frequencyInMinutes       = {
                  + value = "60"
                }
              + location                 = {
                  + value = "West Europe"
                }
              + severityLevel            = {
                  + value = "1"
                }
              + timeWindowInMinutes      = {
                  + value = "60"
                }
              + triggerThreshold         = {
                  + value = "0"
                }
              + triggerThresholdOperator = {
                  + value = "GreaterThan"
                }
            }
        )
      + resource_group_name = "nfdiv-aat"
      + template_content    = jsonencode(
            {
              + "$schema"      = "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#"
              + contentVersion = "1.0.0.0"
              + parameters     = {
                  + actionGroupName          = {
                      + type = "string"
                    }
                  + actionGroupRg            = {
                      + type = "string"
                    }
                  + alertDesc                = {
                      + type = "string"
                    }
                  + alertName                = {
                      + type = "string"
                    }
                  + appInsightsName          = {
                      + type = "string"
                    }
                  + appInsightsQuery         = {
                      + type = "string"
                    }
                  + commonTags               = {
                      + type = "string"
                    }
                  + customEmailSubject       = {
                      + type = "string"
                    }
                  + frequencyInMinutes       = {
                      + defaultValue = "5"
                      + type         = "string"
                    }
                  + location                 = {
                      + type = "string"
                    }
                  + severityLevel            = {
                      + defaultValue = "3"
                      + type         = "string"
                    }
                  + timeWindowInMinutes      = {
                      + defaultValue = "5"
                      + type         = "string"
                    }
                  + triggerThreshold         = {
                      + type = "string"
                    }
                  + triggerThresholdOperator = {
                      + allowedValues = [
                          + "GreaterThan",
                          + "Equal",
                          + "LessThan",
                        ]
                      + defaultValue  = "GreaterThan"
                      + type          = "string"
                    }
                }
              + resources      = [
                  + {
                      + apiVersion = "2017-09-01-preview"
                      + location   = "[parameters('location')]"
                      + name       = "[parameters('alertName')]"
                      + properties = {
                          + action      = {
                              + aznsAction   = {
                                  + actionGroup  = [
                                      + "[resourceId(parameters('actionGroupRg'), 'microsoft.insights/actionGroups', parameters('actionGroupName'))]",
                                    ]
                                  + emailSubject = "[parameters('customEmailSubject')]"
                                }
                              + "odata.type" = "Microsoft.WindowsAzure.Management.Monitoring.Alerts.Models.Microsoft.AppInsights.Nexus.DataContracts.Resources.ScheduledQueryRules.AlertingAction"
                              + severity     = "[parameters('severityLevel')]"
                              + status       = "Active"
                              + trigger      = {
                                  + consecutiveBreach = 1
                                  + threshold         = "[parameters('triggerThreshold')]"
                                  + thresholdOperator = "[parameters('triggerThresholdOperator')]"
                                }
                            }
                          + description = "[parameters('alertDesc')]"
                          + enabled     = "true"
                          + schedule    = {
                              + frequencyInMinutes  = "[parameters('frequencyInMinutes')]"
                              + timeWindowInMinutes = "[parameters('timeWindowInMinutes')]"
                            }
                          + skuType     = "L1"
                          + source      = {
                              + dataSourceId = "[resourceId('microsoft.insights/components', parameters('appInsightsName'))]"
                              + query        = "[parameters('appInsightsQuery')]"
                              + queryType    = "ResultCount"
                            }
                        }
                      + tags       = "[union(variables('tags'), variables('additionalTags'))]"
                      + type       = "microsoft.insights/scheduledqueryrules"
                    },
                ]
              + variables      = {
                  + additionalTags = {
                      + "[concat('hidden-link:', resourceId('microsoft.insights/components', parameters('appInsightsName')))]" = "Resource"
                    }
                  + tags           = "[base64ToJson(parameters('commonTags'))]"
                }
            }
        )
    }

  # module.nfdiv-migration-alert.azurerm_template_deployment.custom_alert[0] will be destroyed
  # (because azurerm_template_deployment.custom_alert is not in configuration)
  - resource "azurerm_template_deployment" "custom_alert" {
      - deployment_mode     = "Incremental" -> null
      - id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Resources/deployments/nfdiv-migration-alert" -> null
      - name                = "nfdiv-migration-alert" -> null
      - outputs             = {} -> null
      - parameters          = {
          - "actionGroupName"          = "NFDIV Fail Slack Alert - aat"
          - "actionGroupRg"            = "nfdiv-aat"
          - "alertDesc"                = "Triggers when a migration fails."
          - "alertName"                = "nfdiv-migration-alert"
          - "appInsightsName"          = "nfdiv-appinsights-aat"
          - "appInsightsQuery"         = "traces | where message contains \"Setting dataVersion to 0 for case id\" | sort by timestamp desc"
          - "commonTags"               = "eyJCdWlsdEZyb20iOiJodHRwczovL2dpdGh1Yi5jb20vSE1DVFMvbmZkaXYtc2hhcmVkLWluZnJhc3RydWN0dXJlLmdpdCIsImFwcGxpY2F0aW9uIjoibm8tZmF1bHQtZGl2b3JjZSIsImJ1c2luZXNzQXJlYSI6IkNGVCIsImNoYW5nZVVybCI6IiIsImNvbnRhY3RTbGFja0NoYW5uZWwiOiIjbm8tZmF1bHQtZGl2b3JjZS10ZWNoIiwiZW52aXJvbm1lbnQiOiJzdGFnaW5nIiwibWFuYWdlZEJ5IjoiTm8gRmF1bHQgRGl2b3JjZSJ9"
          - "customEmailSubject"       = "NFDIV Migration Failed"
          - "frequencyInMinutes"       = "60"
          - "location"                 = "westeurope"
          - "severityLevel"            = "1"
          - "timeWindowInMinutes"      = "60"
          - "triggerThreshold"         = "0"
          - "triggerThresholdOperator" = "GreaterThan"
        } -> null
      - resource_group_name = "nfdiv-aat" -> null
      - template_body       = jsonencode(
            {
              - "$schema"      = "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#"
              - contentVersion = "1.0.0.0"
              - parameters     = {
                  - actionGroupName          = {
                      - type = "string"
                    }
                  - actionGroupRg            = {
                      - type = "string"
                    }
                  - alertDesc                = {
                      - type = "string"
                    }
                  - alertName                = {
                      - type = "string"
                    }
                  - appInsightsName          = {
                      - type = "string"
                    }
                  - appInsightsQuery         = {
                      - type = "string"
                    }
                  - commonTags               = {
                      - type = "string"
                    }
                  - customEmailSubject       = {
                      - type = "string"
                    }
                  - frequencyInMinutes       = {
                      - defaultValue = "5"
                      - type         = "string"
                    }
                  - location                 = {
                      - type = "string"
                    }
                  - severityLevel            = {
                      - defaultValue = "3"
                      - type         = "string"
                    }
                  - timeWindowInMinutes      = {
                      - defaultValue = "5"
                      - type         = "string"
                    }
                  - triggerThreshold         = {
                      - type = "string"
                    }
                  - triggerThresholdOperator = {
                      - allowedValues = [
                          - "GreaterThan",
                          - "Equal",
                          - "LessThan",
                        ]
                      - defaultValue  = "GreaterThan"
                      - type          = "string"
                    }
                }
              - resources      = [
                  - {
                      - apiVersion = "2017-09-01-preview"
                      - location   = "[parameters('location')]"
                      - name       = "[parameters('alertName')]"
                      - properties = {
                          - action      = {
                              - aznsAction   = {
                                  - actionGroup  = [
                                      - "[resourceId(parameters('actionGroupRg'), 'microsoft.insights/actionGroups', parameters('actionGroupName'))]",
                                    ]
                                  - emailSubject = "[parameters('customEmailSubject')]"
                                }
                              - "odata.type" = "Microsoft.WindowsAzure.Management.Monitoring.Alerts.Models.Microsoft.AppInsights.Nexus.DataContracts.Resources.ScheduledQueryRules.AlertingAction"
                              - severity     = "[parameters('severityLevel')]"
                              - status       = "Active"
                              - trigger      = {
                                  - consecutiveBreach = 1
                                  - threshold         = "[parameters('triggerThreshold')]"
                                  - thresholdOperator = "[parameters('triggerThresholdOperator')]"
                                }
                            }
                          - description = "[parameters('alertDesc')]"
                          - enabled     = "true"
                          - schedule    = {
                              - frequencyInMinutes  = "[parameters('frequencyInMinutes')]"
                              - timeWindowInMinutes = "[parameters('timeWindowInMinutes')]"
                            }
                          - skuType     = "L1"
                          - source      = {
                              - dataSourceId = "[resourceId('microsoft.insights/components', parameters('appInsightsName'))]"
                              - query        = "[parameters('appInsightsQuery')]"
                              - queryType    = "ResultCount"
                            }
                        }
                      - tags       = "[union(variables('tags'), variables('additionalTags'))]"
                      - type       = "microsoft.insights/scheduledqueryrules"
                    },
                ]
              - variables      = {
                  - additionalTags = {
                      - "[concat('hidden-link:', resourceId('microsoft.insights/components', parameters('appInsightsName')))]" = "Resource"
                    }
                  - tags           = "[base64ToJson(parameters('commonTags'))]"
                }
            }
        ) -> null
    }

Plan: 3 to add, 10 to change, 3 to destroy.

@hmcts-jenkins-j-to-z
Copy link

hmcts-jenkins-j-to-z bot commented Apr 14, 2024

Plan Result (aat)

Plan: 0 to add, 3 to change, 0 to destroy.
  • Update
    • module.nfdiv-fail-action-group-slack.azurerm_resource_group_template_deployment.action-group
    • module.nfdiv-fail-alert.azurerm_resource_group_template_deployment.custom_alert[0]
    • module.nfdiv-migration-alert.azurerm_resource_group_template_deployment.custom_alert[0]
  • Move
    • module.application_insights.azurerm_monitor_activity_log_alert.main => module.application_insights.azurerm_monitor_activity_log_alert.main[0]
    • module.application_insights_preview[0].azurerm_monitor_activity_log_alert.main => module.application_insights_preview[0].azurerm_monitor_activity_log_alert.main[0]
Change Result (Click me)
  # module.application_insights.azurerm_monitor_activity_log_alert.main has moved to module.application_insights.azurerm_monitor_activity_log_alert.main[0]
    resource "azurerm_monitor_activity_log_alert" "main" {
        id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Insights/activityLogAlerts/Application Insights daily cap reached - nfdiv-appinsights-aat"
        name                = "Application Insights daily cap reached - nfdiv-appinsights-aat"
        tags                = {
            "application"         = "no-fault-divorce"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
        # (5 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.application_insights_preview[0].azurerm_monitor_activity_log_alert.main has moved to module.application_insights_preview[0].azurerm_monitor_activity_log_alert.main[0]
    resource "azurerm_monitor_activity_log_alert" "main" {
        id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Insights/activityLogAlerts/Application Insights daily cap reached - nfdiv-appinsights-preview"
        name                = "Application Insights daily cap reached - nfdiv-appinsights-preview"
        tags                = {
            "application"         = "no-fault-divorce"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
        # (5 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.nfdiv-fail-action-group-slack.azurerm_resource_group_template_deployment.action-group will be updated in-place
  ~ resource "azurerm_resource_group_template_deployment" "action-group" {
        id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Resources/deployments/NFDIV_slack"
        name                = "NFDIV_slack"
        tags                = {}
      ~ template_content    = jsonencode(
          ~ {
              ~ parameters     = {
                  ~ actionGroupName      = {
                      ~ type = "String" -> "string"
                    }
                  ~ emailReceiverAddress = {
                      ~ type     = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ emailReceiverName    = {
                      ~ type     = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ location             = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ shortName            = {
                      ~ type = "String" -> "string"
                    }
                }
                # (3 unchanged attributes hidden)
            }
        )
        # (4 unchanged attributes hidden)
    }

  # module.nfdiv-fail-alert.azurerm_resource_group_template_deployment.custom_alert[0] will be updated in-place
  ~ resource "azurerm_resource_group_template_deployment" "custom_alert" {
        id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Resources/deployments/nfdiv-fail-alert"
        name                = "nfdiv-fail-alert"
        tags                = {}
      ~ template_content    = jsonencode(
          ~ {
              ~ parameters     = {
                  ~ actionGroupName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ actionGroupRg            = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertDesc                = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertName                = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsQuery         = {
                      ~ type = "String" -> "string"
                    }
                  ~ commonTags               = {
                      ~ type = "String" -> "string"
                    }
                  ~ customEmailSubject       = {
                      ~ type = "String" -> "string"
                    }
                  ~ frequencyInMinutes       = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ location                 = {
                      ~ type = "String" -> "string"
                    }
                  ~ severityLevel            = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ timeWindowInMinutes      = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ triggerThreshold         = {
                      ~ type = "String" -> "string"
                    }
                  ~ triggerThresholdOperator = {
                      ~ type          = "String" -> "string"
                        # (2 unchanged attributes hidden)
                    }
                }
                # (4 unchanged attributes hidden)
            }
        )
        # (4 unchanged attributes hidden)
    }

  # module.nfdiv-migration-alert.azurerm_resource_group_template_deployment.custom_alert[0] will be updated in-place
  ~ resource "azurerm_resource_group_template_deployment" "custom_alert" {
        id                  = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Resources/deployments/nfdiv-migration-alert"
        name                = "nfdiv-migration-alert"
        tags                = {}
      ~ template_content    = jsonencode(
          ~ {
              ~ parameters     = {
                  ~ actionGroupName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ actionGroupRg            = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertDesc                = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertName                = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsQuery         = {
                      ~ type = "String" -> "string"
                    }
                  ~ commonTags               = {
                      ~ type = "String" -> "string"
                    }
                  ~ customEmailSubject       = {
                      ~ type = "String" -> "string"
                    }
                  ~ frequencyInMinutes       = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ location                 = {
                      ~ type = "String" -> "string"
                    }
                  ~ severityLevel            = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ timeWindowInMinutes      = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ triggerThreshold         = {
                      ~ type = "String" -> "string"
                    }
                  ~ triggerThresholdOperator = {
                      ~ type          = "String" -> "string"
                        # (2 unchanged attributes hidden)
                    }
                }
                # (4 unchanged attributes hidden)
            }
        )
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 3 to change, 0 to destroy.
ℹ️ Objects have changed outside of Terraform

This feature was introduced from Terraform v0.15.4.

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # module.application_insights.azurerm_application_insights.this has changed
  ~ resource "azurerm_application_insights" "this" {
      ~ connection_string                     = (sensitive value)
        id                                    = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Insights/components/nfdiv-appinsights-aat"
        name                                  = "nfdiv-appinsights-aat"
        tags                                  = {
            "application"         = "no-fault-divorce"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
        # (15 unchanged attributes hidden)
    }

  # module.application_insights_preview[0].azurerm_application_insights.this has changed
  ~ resource "azurerm_application_insights" "this" {
      ~ connection_string                     = (sensitive value)
        id                                    = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/nfdiv-aat/providers/Microsoft.Insights/components/nfdiv-appinsights-preview"
        name                                  = "nfdiv-appinsights-preview"
        tags                                  = {
            "application"         = "no-fault-divorce"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#no-fault-divorce"
            "environment"         = "staging"
            "managedBy"           = "No Fault Divorce"
        }
        # (15 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the

@hmcts-jenkins-j-to-z
Copy link

hmcts-jenkins-j-to-z bot commented May 10, 2024

Plan Result (prod)

Plan: 0 to add, 3 to change, 0 to destroy.
  • Update
    • module.nfdiv-fail-action-group-slack.azurerm_resource_group_template_deployment.action-group
    • module.nfdiv-fail-alert.azurerm_resource_group_template_deployment.custom_alert[0]
    • module.nfdiv-migration-alert.azurerm_resource_group_template_deployment.custom_alert[0]
  • Move
    • module.application_insights.azurerm_monitor_activity_log_alert.main => module.application_insights.azurerm_monitor_activity_log_alert.main[0]
Change Result (Click me)
  # module.application_insights.azurerm_monitor_activity_log_alert.main has moved to module.application_insights.azurerm_monitor_activity_log_alert.main[0]
    resource "azurerm_monitor_activity_log_alert" "main" {
        id                  = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/nfdiv-prod/providers/Microsoft.Insights/activityLogAlerts/Application Insights daily cap reached - nfdiv-appinsights-prod"
        name                = "Application Insights daily cap reached - nfdiv-appinsights-prod"
        tags                = {
            "application"         = "no-fault-divorce"
            "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#no-fault-divorce"
            "environment"         = "production"
            "managedBy"           = "No Fault Divorce"
        }
        # (5 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.nfdiv-fail-action-group-slack.azurerm_resource_group_template_deployment.action-group will be updated in-place
  ~ resource "azurerm_resource_group_template_deployment" "action-group" {
        id                  = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/nfdiv-prod/providers/Microsoft.Resources/deployments/NFDIV_slack"
        name                = "NFDIV_slack"
        tags                = {}
      ~ template_content    = jsonencode(
          ~ {
              ~ parameters     = {
                  ~ actionGroupName      = {
                      ~ type = "String" -> "string"
                    }
                  ~ emailReceiverAddress = {
                      ~ type     = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ emailReceiverName    = {
                      ~ type     = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ location             = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ shortName            = {
                      ~ type = "String" -> "string"
                    }
                }
                # (3 unchanged attributes hidden)
            }
        )
        # (4 unchanged attributes hidden)
    }

  # module.nfdiv-fail-alert.azurerm_resource_group_template_deployment.custom_alert[0] will be updated in-place
  ~ resource "azurerm_resource_group_template_deployment" "custom_alert" {
        id                  = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/nfdiv-prod/providers/Microsoft.Resources/deployments/nfdiv-fail-alert"
        name                = "nfdiv-fail-alert"
        tags                = {}
      ~ template_content    = jsonencode(
          ~ {
              ~ parameters     = {
                  ~ actionGroupName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ actionGroupRg            = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertDesc                = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertName                = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsQuery         = {
                      ~ type = "String" -> "string"
                    }
                  ~ commonTags               = {
                      ~ type = "String" -> "string"
                    }
                  ~ customEmailSubject       = {
                      ~ type = "String" -> "string"
                    }
                  ~ frequencyInMinutes       = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ location                 = {
                      ~ type = "String" -> "string"
                    }
                  ~ severityLevel            = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ timeWindowInMinutes      = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ triggerThreshold         = {
                      ~ type = "String" -> "string"
                    }
                  ~ triggerThresholdOperator = {
                      ~ type          = "String" -> "string"
                        # (2 unchanged attributes hidden)
                    }
                }
                # (4 unchanged attributes hidden)
            }
        )
        # (4 unchanged attributes hidden)
    }

  # module.nfdiv-migration-alert.azurerm_resource_group_template_deployment.custom_alert[0] will be updated in-place
  ~ resource "azurerm_resource_group_template_deployment" "custom_alert" {
        id                  = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/nfdiv-prod/providers/Microsoft.Resources/deployments/nfdiv-migration-alert"
        name                = "nfdiv-migration-alert"
        tags                = {}
      ~ template_content    = jsonencode(
          ~ {
              ~ parameters     = {
                  ~ actionGroupName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ actionGroupRg            = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertDesc                = {
                      ~ type = "String" -> "string"
                    }
                  ~ alertName                = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsName          = {
                      ~ type = "String" -> "string"
                    }
                  ~ appInsightsQuery         = {
                      ~ type = "String" -> "string"
                    }
                  ~ commonTags               = {
                      ~ type = "String" -> "string"
                    }
                  ~ customEmailSubject       = {
                      ~ type = "String" -> "string"
                    }
                  ~ frequencyInMinutes       = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ location                 = {
                      ~ type = "String" -> "string"
                    }
                  ~ severityLevel            = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ timeWindowInMinutes      = {
                      ~ type         = "String" -> "string"
                        # (1 unchanged attribute hidden)
                    }
                  ~ triggerThreshold         = {
                      ~ type = "String" -> "string"
                    }
                  ~ triggerThresholdOperator = {
                      ~ type          = "String" -> "string"
                        # (2 unchanged attributes hidden)
                    }
                }
                # (4 unchanged attributes hidden)
            }
        )
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 3 to change, 0 to destroy.
ℹ️ Objects have changed outside of Terraform

This feature was introduced from Terraform v0.15.4.

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # module.application_insights.azurerm_application_insights.this has changed
  ~ resource "azurerm_application_insights" "this" {
      ~ connection_string                     = (sensitive value)
        id                                    = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/nfdiv-prod/providers/Microsoft.Insights/components/nfdiv-appinsights-prod"
        name                                  = "nfdiv-appinsights-prod"
        tags                                  = {
            "application"         = "no-fault-divorce"
            "builtFrom"           = "https://github.com/HMCTS/nfdiv-shared-infrastructure.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#no-fault-divorce"
            "environment"         = "production"
            "managedBy"           = "No Fault Divorce"
        }
        # (15 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the

@renovate renovate bot force-pushed the renovate/azuread-2.x branch from 69a8b59 to 9a5410b Compare May 23, 2024 20:30
@renovate renovate bot force-pushed the renovate/azuread-2.x branch from 9a5410b to 91099ed Compare June 7, 2024 04:33
@renovate renovate bot force-pushed the renovate/azuread-2.x branch from 91099ed to 32ba3d0 Compare June 15, 2024 11:32
@renovate renovate bot force-pushed the renovate/azuread-2.x branch from 32ba3d0 to 49a6aba Compare June 28, 2024 08:20
@infracost
Copy link

infracost bot commented Jun 28, 2024

Infracost free monthly run limit exceeded. Please contact hello@infracost.io to purchase usage pack.: 403 Forbidden Infracost free monthly run limit exceeded. Please contact hello@infracost.io to purchase usage pack.

@renovate
Copy link
Author

renovate bot commented Jun 28, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@renovate renovate bot changed the title Update Terraform azuread to v2 Update Terraform azuread to v2 - abandoned Sep 27, 2024
@renovate
Copy link
Author

renovate bot commented Sep 27, 2024

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants