hashicorp/terraform-provider-azurerm v5.13.0

on GitHub

5.13.0 (November 5, 2026)

FEATURES:

• New List Resource: azurerm_automation_runtime_environment_package (#33742)
• New List Resource: azurerm_data_protection_backup_instance_cosmosdb_account (#33535)
• New Resource: azurerm_data_protection_backup_instance_cosmosdb_account (#33535)

ENHANCEMENTS:

• dependencies: containerservice - update API version to 2026-07-01 (#33729)
• Data Source: azurerm_storage_account - export the smb_oauth_enabled property (#32457)
• azurerm_container_app - add support for the session_affinity_enabled property (#29414)
• azurerm_kubernetes_cluster - add support for the key_management_service.key_vault_id property (#33761)
• azurerm_linux_virtual_machine_scale_set - add support for the automatic_zone_rebalancing_enabled property (#32564)
• azurerm_netapp_account - add support for the active_directory.administrator_users, active_directory.backup_users, active_directory.domain_controller_connection_encryption_enabled, active_directory.ldap_client_preferred_servers, active_directory.ldap_search_scope, and active_directory.security_users properties (#33735)
• azurerm_orchestrated_virtual_machine_scale_set - add support for the automatic_zone_rebalancing_enabled, resilient_virtual_machine_creation_enabled, and resilient_virtual_machine_deletion_enabled property (#32564)
• azurerm_storage_account - add support for the smb_oauth_enabled property (#32457)
• azurerm_windows_virtual_machine_scale_set - add support for the automatic_zone_rebalancing_enabled property (#32564)
• azurerm_automation_runtime_environment_package - add Resource Identity support (#33742)
• azurerm_container_app_job - add temporal as a valid value for the event_trigger_config.scale.rules.custom_rule_type property (#33748)
• azurerm_container_app - add temporal as a valid value for the template.custom_scale_rule.custom_rule_type property (#33748)
• azurerm_kubernetes_cluster - add support for versionless key IDs in the key_management_service.key_vault_key_id property (#33761)
• azurerm_kubernetes_cluster - tag-only updates now use the UpdateTags API (PATCH) instead of CreateOrUpdate (PUT), avoiding an unnecessary cluster reconcile (#33611)
• azurerm_linux_virtual_machine - support in-place association of capacity_reservation_group_id for zonal VMs (#33172)
• azurerm_linux_web_app_slot - add support for 26 to node_version (#33775)
• azurerm_linux_web_app - add support for 26 to node_version (#33775)
• azurerm_palo_alto_local_rulestack_rule - support port ranges in the protocol and protocol_ports properties and any in the protocol property (#32758)
• azurerm_private_dns_resolver_forwarding_rule - improve validation for the name property (#33750)
• azurerm_windows_virtual_machine - support in-place association of capacity_reservation_group_id for zonal VMs (#33172)

BUG FIXES:

• azurerm_kusto_cluster - fix perpetual diff from list order on trusted_external_tenants (#32794)
• azurerm_mssql_managed_instance - fix an edge case that caused storage_iops restriction errors to trigger incorrectly (#33778)
• azurerm_netapp_volume - remove the default for unix_permissions as this prevented provisioning SMB or dual protocol volumes with NTFS security style (#33766)
• azurerm_postgresql_flexible_server_configuration - fix the deletion logic for scaling-related configuration items when targeting a replica (#33794)
• azurerm_storage_account - expand compatibility check for customer_managed_key to support FileStorage on Standard tier when using the V2 billing model (#33767)