ReleaseBytes
azure Terraform AzureRM Provider Releases · · 4.68.0

Terraform Azure Provider v4.68.0: New Resources and Enhancements

terraforminfraazurepreviewengineerazure-aks
feature patch

Terraform Azure Provider version 4.68.0 introduces new resources for managing Azure DevOps pools, Private DNS CNAME records, and Data Lake Storage backup instances. The release also includes enhancements to existing resources, such as improved validation for Key Vault names and expanded support for Bastion Host configurations. Several bug fixes address issues with Databricks workspace updates, Function App deployments, and Kubernetes cluster configurations, improving stability and resource management.

  • →New Data Source: azurerm_managed_devops_pool
  • →New List Resource: azurerm_private_dns_cname_record
  • →New Resource: azurerm_data_protection_backup_instance_data_lake_storage
  • →New Resource: azurerm_managed_devops_pool
  • →go-azure-sdk - upgrade to v0.20260407.1111603
Features (4) ›
  • New Data Source: azurerm_managed_devops_pool
    #28325
  • New List Resource: azurerm_private_dns_cname_record
    #31833
  • New Resource: azurerm_data_protection_backup_instance_data_lake_storage
    #32044
  • New Resource: azurerm_managed_devops_pool
    #28325
Enhancements (14) ›
  • dependencies go-azure-sdk - upgrade to v0.20260407.1111603
    #32112
  • Data Source: azurerm_bastion_host - export private_only_enabled
    #32042
  • Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors
    #30453
  • Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property
    #29303
  • azurerm_app_configuration_feature - Add support for custom_filter
    #30160
  • azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled
    #32042
  • azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability
    #31836
  • azurerm_key_vault - improve validation for the name field to prevent apply time errors
    #30453
  • azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this
    #32117
  • azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization
    #32001
  • azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property
    #29303
  • azurerm_netapp_volume - add support for data_protection_advanced_ransomware
    #32099
  • azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time
    #31705
  • azurerm_storage_account - the is_hns_enabled property is now validated at plan time
    #30536
Fixes (7) ›
  • azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property
    #32025

  • azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments

    #32091
  • azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create
    #32117
  • azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+
    #32117
  • azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty
    #31699
  • azurerm_resource_group - fix parallelism issue in create_poller
    #32123
  • azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version
    #32072
Read the original announcement →

https://github.com/hashicorp/terraform-provider-azurerm/releases/tag/v4.68.0

Related releases