aliyun/terraform-provider-alicloud v2.2.0 on GitHub

NOTES:

resource/alicloud_dts_subscription_job and resource/alicloud_dts_synchronization_job: require the canonical DtsJobId for imports and job identity checks. If existing state contains a DTS instance ID, back up the state, verify the intended job, and re-import its DtsJobId as described in the resource documentation. (#10412)
resource/alicloud_esa_image_transform: enable is now required. Set it explicitly to on or off when upgrading. (#11176)
resource/alicloud_cloud_firewall_vpc_cen_tr_firewall: changes to tr_attachment_master_zone or tr_attachment_slave_zone now force resource replacement. (#11295)
resource/alicloud_threat_detection_service_linked_role: default service_linked_role to AliyunServiceRoleForSas and refuse to adopt an existing role automatically. State created without an explicit role name on v1.283.0-v2.1.0 may require re-import; follow the migration instructions in the resource documentation before applying. (#11455)

FEATURES:

New Resource: alicloud_dts_check_job (#10244)
New Resource: alicloud_direct_mail_dedicated_ip_pool (#10601)
New Resource: alicloud_direct_mail_config_set (#10601)
New Resource: alicloud_arms_notification_policy (#10694)
New Resource: alicloud_arms_webhook_contact (#10694)
New Resource: alicloud_tag_created_by (#11143)
New Resource: alicloud_governance_service_activation (#11157)
New Resource: alicloud_esa_site_environment (#11179)
New Resource: alicloud_dts_gad_instance (#11378)
New Data Source: alicloud_cms_metric_list (#10150)
New Data Source: alicloud_direct_mail_dedicated_ip_pools (#10601)
New Data Source: alicloud_direct_mail_config_sets (#10601)
New Data Source: alicloud_rds_db_instance_performance (#10802)
New Data Source: alicloud_oos_inventories (#11429)
New Data Source: alicloud_rds_databases (#11453)

ENHANCEMENTS:

resource/alicloud_vod_domain: support env for SSL certificate deployment. (#10196)
resource/alicloud_redis_tair_instance: support replica_count and slave_replica_count. (#10799)
resource/alicloud_dts_migration_job: support data_check_configure. (#10244)
resource/alicloud_polardb_cluster: support TDE automatic key rotation for PostgreSQL-compatible and Oracle syntax-compatible clusters. (#10385)
resource/alicloud_kvstore_instance and resource/alicloud_redis_tair_instance: support Elastic Burst and per-shard additional bandwidth. (#10584, #11372)
resource/alicloud_cms_addon_release: support entity_rules and deprecate dry_run. (#10835)
resource/alicloud_vod_domain: support ssl_protocol, cert_id, cert_name, cert_type, cert_region, ssl_pub and ssl_pri. (#11054)
resource/alicloud_nas_file_system: support auto_upgrade_config for CPFS SE file systems; data-source/alicloud_nas_file_systems: export auto_upgrade_config. (#11085)
resource/alicloud_ecs_disk and resource/alicloud_disk: support force_delete to convert and release PrePaid data disks on destroy. (#11108)
resource/alicloud_rds_backup: export the create-time backup_job_id. (#11109)
resource/alicloud_pvtz_zone_record: support AAAA (IPv6) records. (#11138)
resource/alicloud_polardb_backup_policy: support advanced backup policies and custom advanced data backup rules. Switching from Normal to Advanced is irreversible. (#11149)
resource/alicloud_esa_image_transform: support auto_avif and auto_webp, and export config_type. (#11176)
resource/alicloud_db_instance: support force_encryption for PostgreSQL. (#11223)
resource/alicloud_dts_synchronization_instance: support updating auto_pay for existing subscription instances. (#11224)
resource/alicloud_privatelink_vpc_endpoint_connection: support traffic_control_mode and export endpoint_owner_id; data-source/alicloud_privatelink_vpc_endpoint_connections: export both attributes. (#11277)
resource/alicloud_cloud_firewall_vpc_cen_tr_firewall: support firewall_vpc_id, firewall_vswitch_id, and the manual and semi-managed route modes; make firewall_vpc_cidr optional and deprecate firewall_subnet_cidr, tr_attachment_master_cidr and tr_attachment_slave_cidr. (#11295)
resource/alicloud_ecd_desktop: support desktop_timers; resource/alicloud_ecd_policy_group: support internet_communication_protocol, recording_duration, client_types, end_user_apply_admin_coordinate and end_user_group_coordinate. (#11345)
resource/alicloud_realtime_compute_vvp_instance: support default_namespace_resource_spec. (#11392)
resource/alicloud_kvstore_instance and resource/alicloud_redis_tair_instance: support write-only password_wo and password_wo_version. (#11409)
resource/alicloud_mongodb_instance and resource/alicloud_mongodb_sharding_instance: support write-only account_password_wo and account_password_wo_version. (#11410)
resource/alicloud_db_database: support account_name, account_privilege and collation_name. (#11411)
resource/alicloud_elasticsearch_instance: support write-only password_wo and password_wo_version. (#11412)
resource/alicloud_elasticsearch_instance: support search_node_configuration and index_node_configuration. (#11428)
resource/alicloud_instance: support the cloud_essd_xc0 and cloud_essd_xc1 disk categories. (#11436)
docs: use maxmemory-policy in the alicloud_kvstore_instance example configurations. (#11438)
docs: correct the ID format and import example for alicloud_cen_transit_router_route_table_propagation. (#11464)
resource/alicloud_wafv3_domain: support redirect.backend_ports. (#11466)

BUG FIXES:

resource/alicloud_alb_acl, resource/alicloud_alb_acl_entry_attachment and resource/alicloud_alb_listener_acl_attachment: retry AclStatusNotStable errors. (#10157)
resource/alicloud_ess_scaling_configuration: preserve out-of-band user_data and tags, reconcile tag removal, and reject negative IPv6 address counts during planning. (#10343)
resource/alicloud_dts_subscription_job and resource/alicloud_dts_synchronization_job: use the canonical job ID when updating job names and reject mismatched job identities. (#10412)
resource/alicloud_cs_kubernetes and data-source/alicloud_cs_cluster_credential: return kubeconfig parsing errors instead of panicking, and propagate state-setting errors. (#10596)
resource/alicloud_apig_plugin: fix read errors when using the AI gateway. (#11081)
resource/alicloud_nas_file_system: wait for asynchronously persisted description and resource_group_id values after creation. (#11085)
resource/alicloud_privatelink_vpc_endpoint_service: include zone_id in the resource set hash. (#11104)
resource/alicloud_redis_tair_instance: retry SocketTimeout.Exception errors. (#11105)
resource/alicloud_ess_eci_scaling_configuration: fix empty-string defaults in environment variable attributes. (#11107)
resource/alicloud_rds_backup: correctly parse the composite resource ID when deleting a backup. (#11109)
resource/alicloud_rocketmq_instance: send trace_on only when explicitly configured. (#11110)
resource/alicloud_tag_created_by: propagate the lifecycle context through retries. (#11157)
resource/alicloud_alikafka_topic: avoid perpetual configs diffs caused by server-managed keys and JSON value representation. (#11158)
provider: restore SLS endpoint cache reuse across API calls. (#11208)
resource/alicloud_oos_service_setting: correctly detect OSS delivery changes, send the complete delivery configuration on update, and avoid a read panic. (#11210)
resource/alicloud_esa_certificate: fix invalid certificate type errors during creation. (#11215)
resource/alicloud_nlb_server_group: accept TCP_UDP while preserving TCPSSL in schema validation for compatibility. (#11222, #11502)
resource/alicloud_ecd_policy_group: prevent read drift for policy attributes and configured client_types. (#11345)
resource/alicloud_polardb_cluster: make encrypt_new_tables Optional and Computed to prevent plan drift. (#11426)
provider: honor NO_PROXY for tea-roa clients and preserve endpoint ports when bypassing a proxy. (#11437)
resource/alicloud_threat_detection_service_linked_role: reconcile role status with Security Center and prevent unintended adoption of existing roles. (#11455)
provider: restore skip-aware validation for DTS, IMS and PAI Workspace resources. (#11459)
provider: preserve configured client timeouts when rebuilding the SLS SDK configuration. (#11461)
provider: honor configured client timeouts in Function Compute and OSS v2 clients. (#11463)
resource/alicloud_vpc: make system_route_table_description and system_route_table_name Optional and Computed to prevent persistent diffs when omitted. (#11468)
resource/alicloud_dts_gad_instance: use the configured provider client through ResourceBase metadata. (#11476)
provider: derive legacy SDK timeouts from provider settings and preserve defaults when timeout settings are omitted. (#11477)
provider: refresh credentials_uri credentials before expiration. (#11479)
data-source/alicloud_cs_kubernetes_addons: preserve error context; resource/alicloud_polardb_endpoint: prevent endpoint-specific retry rules from affecting other operations. (#11483)
resource/alicloud_amqp_instance: release PayAsYouGo and Serverless instances on destroy. (#11095)
resource/alicloud_amqp_instance: serialize CreateInstance tags as a JSON string. (#11500)
resource/alicloud_cs_kubernetes, resource/alicloud_cs_managed_kubernetes, resource/alicloud_cs_edge_kubernetes and resource/alicloud_cs_serverless_kubernetes: tolerate denied optional kubeconfig reads during cluster refresh and clear stale credential state when access is denied. (#11498, #11503)
resource/alicloud_esa_waf_rule: preserve sibling rules when updating phases that require batch updates. (#11579)
provider: refresh file-based OIDC role credentials before expiration and honor session_expiration. (#11580)
resource/alicloud_ecd_desktop: send host_name correctly on creation, read the actual host name, and suppress changes to this create-only attribute. (#11581)