Azure/terraform-azurerm-avm-res-app-managedenvironment v0.6.0 on GitHub

This release moves the lock, role assignments and diagnostic settings from the AzureRM provider to AzAPI, so the module no longer requires AzureRM. It adds the hashicorp/time provider (~> 0.13). No input changes are needed, and moved blocks adopt existing deployments in place.

Upgrading from 0.5.x

An upgrade from 0.5.1 was tested against real Azure. Nothing was destroyed or replaced, and the environment and its child resources were unchanged.

Change a ReadOnly lock to CanNotDelete, or remove it, until the upgrade is applied.
Cross-tenant role assignments, which set delegated_managed_identity_resource_id, need a terraform state rm and an import block. See the README.
Run terraform init -upgrade, then terraform plan. The environment moves to azapi_resource.this without changes. The lock, role assignments and diagnostic settings are updated in place with the same settings, and child resources such as Dapr components and storages record the new retry setting in the state only. The plan also adds state-only random_uuid, time_sleep and terraform_data resources and, when enable_telemetry is true, the AVM telemetry deployments. The old modtm telemetry resources are removed from the state. Don't apply a plan that destroys or replaces anything.
Apply the plan. A second plan reports no changes, except that the AVM telemetry deployments update on every plan while enable_telemetry is true.

See Upgrading from 0.5.x or earlier in the README.

Other changes

Adds the resource_types, retry and ignore_body_changes inputs, with a slot for each submodule. retry retries ContainerAppEnvironmentDisabled by default, as the environment always did, and now also applies to child resources. timeouts now applies to every resource.
Adds lock.notes and role_assignments.name, and validates parent_id.
Role names are matched, ignoring case, against the role definitions that can be assigned in the resource group, and an unknown name fails during plan. For a custom role that can only be assigned on the environment, use its ID.
Diagnostic settings compare only the configured log and metric categories, so categories enabled outside Terraform are no longer reported as changes.
Waits 30 seconds after deleting a lock before deleting the environment and its child resources, because Azure keeps enforcing a deleted lock for a few seconds.
The examples use AzAPI.

Known issue

Dapr components that set secrets fail AzAPI schema validation (#240). 0.5.x is affected too.

What's Changed

Features

feat: move lock, role assignments and diagnostic settings to AzAPI by @thomascoats in #239

New Contributors

@thomascoats made their first contribution in #239

Full Changelog: v0.5.1...v0.6.0