Azure/terraform-azurerm-avm-res-keyvault-vault v0.13.0

on GitHub

Breaking changes and upgrade guidance

• Replace the root module's resource_group_name input with parent_id, the resource group's full ARM resource ID.
• The vault, its lock, role assignments and diagnostic settings, plus private endpoints and their locks, now use AzAPI. moved blocks transfer their Terraform addresses from AzureRM. Access policies and private-endpoint application security group associations are removed from state without being destroyed and are represented in their parent resources' bodies. Review the upgrade plan for unexpected destruction or replacement before applying.
• Module-managed private DNS zone groups require a one-time import during upgrade because AzureRM previously stored them inside the private endpoint. See the upgrade instructions for the import syntax and the additional ReadOnly-lock and cross-tenant-role-assignment cases.
• The private_endpoints output now exposes the documented subset of attributes rather than the complete AzureRM resource. Update references to attributes no longer included.
• Direct users of modules/key and modules/secret must provide location when telemetry is enabled, which is the default, or explicitly disable telemetry. The root module passes its location and telemetry setting to both.
• Telemetry now uses empty subscription-scope Azure deployments rather than ModTM. When enabled, the deployment identity needs appropriate subscription-scope Microsoft.Resources/deployments permissions. Telemetry deployments can show an update on subsequent plans because they include the plan timestamp. Keys, secrets and certificate contacts remain on AzureRM.

What's Changed

Other Changes

• feat!: manage the key vault and its interfaces with AzAPI by @thomascoats in #381
• feat!: manage private endpoints with AzAPI by @thomascoats in #387
• test: verify telemetry and document upgrade requirements by @jaredfholgate in #395

New Contributors

• @thomascoats made their first contribution in #381

Full Changelog: v0.12.0...v0.13.0