hashicorp/terraform-provider-tfe v0.83.0

on GitHub

0.83.0 (October 30, 2026)

NEW FEATURES:

• d/tfe_saml_idp_certificate, d/tfe_saml_idp_certificates: Adds data sources to read a single trusted SAML IdP certificate by ID or list them, optionally filtered by display name. Requires Terraform Enterprise v2.1.0 or later. by @skj-skj

• r/tfe_admin_customization_settings: Adds a resource to manage the admin customization settings, including the support email and support URL address, internal support/documentation/tutorials URL overrides, avatar sources, and login/footer/error/new-user messages. Requires Terraform Enterprise v2.1.0 or later. by @sanjay-kansyakar-hashicorp

• r/tfe_admin_general_settings: Adds a resource to manage the admin general settings, including enable_public_registration. Requires Terraform Enterprise v2.1.0 or later. by @sanjay-kansyakar-hashicorp

• r/tfe_stack_policy_set, r/tfe_stack_policy_set_exclusion: Adds resources to scope Terraform policy (tfpolicy) policy sets to Stacks and to exclude Stacks from them. On Terraform Enterprise, requires v2.1.0 or later. by @shrishyamb

• r/tfe_admin_banner: Adds a tfe_admin_banner resource to manage the site-wide announcement banner in Terraform Enterprise. Requires Terraform Enterprise v2.1.0 or later. by @sanjay-kansyakar-hashicorp

• r/tfe_tfpolicy_version: Adds a resource for Terraform Enterprise admins to manage Terraform policy plugin versions, with architecture-specific binaries configured using the archs attribute. Requires Terraform Enterprise v2.1.0 or later. by @shrishyamb

• r/tfe_policy_set, d/tfe_policy_set, r/tfe_policy_set_parameter, r/tfe_workspace_policy_set, r/tfe_workspace_policy_set_exclusion, r/tfe_project_policy_set, r/tfe_project_policy_set_exclusion, r/tfe_tag_policy_set, r/tfe_tag_policy_set_exclusion: Terraform policy (tfpolicy) policy sets are now generally available. Documents the latest and managed values of policy_tool_version. On Terraform Enterprise, requires v2.1.0 or later. by @shrishyamb

ENHANCEMENTS:

• r/tfe_saml_settings: idp_cert is now optional and deprecated in favor of the tfe_saml_idp_certificate resource. idp_cert is still required on Terraform Enterprise releases earlier than v2.1.0, and omitting it there fails at plan time. Removing idp_cert from configuration only stops Terraform from managing it. Changing only the formatting of idp_cert (line wrapping or PEM armor) is no longer a diff. by @skj-skj

• r/tfe_policy_set: Rejects agent_enabled and overridable at plan time when kind is tfpolicy, because Terraform policy (tfpolicy) policy sets do not support them. by @shrishyamb

• a/tfe_query_run: Include the query run ID and the end of the query log in the error when a query run errors. by @shwetamurali

BUG FIXES:

• r/tfe_variable: Conditionally emit the "Available Write-Only Attribute Alternative" warning when value is set and sensitive is true. by @hirokimatsueda (#2265)

• r/tfe_team_access: apply errors on some resources now contain more detail when triggered by a backend validation issue by @brandonc

NOTES:

• r/tfe_saml_settings, r/tfe_saml_idp_certificate: Add a migration guide from tfe_saml_settings.idp_cert to tfe_saml_idp_certificate. by @skj-skj

BREAKING CHANGES:

• r/tfe_saml_settings: idp_cert can no longer be set to an empty string, whitespace or PEM armor without a certificate body; such values now fail at plan time. Omit idp_cert instead. On Terraform Enterprise v2.1.0 or later, terraform destroy no longer clears idp_cert; it only disables SAML and leaves every IdP certificate on the instance. Use tfe_saml_idp_certificate to manage certificate removal. by @skj-skj