Skip to content

Update Terraform azurerm to v4.67.0#197

Merged
renovate[bot] merged 1 commit intomasterfrom
renovate/azurerm-4.x
Apr 7, 2026
Merged

Update Terraform azurerm to v4.67.0#197
renovate[bot] merged 1 commit intomasterfrom
renovate/azurerm-4.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 3, 2026

This PR contains the following updates:

Package Type Update Change
azurerm (source) required_provider minor 4.66.04.67.0

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.67.0

Compare Source

FEATURES:

  • New List Resource: azurerm_storage_sync (#​31995)
  • New Resource: azurerm_data_protection_backup_policy_data_lake_storage (#​31179)
  • New Resource: azurerm_eventgrid_namespace_topic (#​30104)
  • New Resource: azurerm_kubernetes_cluster_deployment_safeguard (#​31670)
  • New Resource: azurerm_resource_provider_feature_registration (#​28303)

ENHANCEMENTS:

  • dependencies: go-azure-sdk - upgrade to v0.20260326.1151219 (#​32047)
  • dependencies: storage - update to API version 2025-06-01 (#​32071)
  • Data Source: azurerm_application_gateway - export the backend, listener, and routing_rule properties (#​30376)
  • Data Source: azurerm_logic_app_standard - export the site_config.ip_restriction_default_action property (#​31816)
  • Data Source: azurerm_mssql_elasticpool - export the high_availability_replica_count property (#​31761)
  • azurerm_application_gateway - add support for the backend, listener, and routing_rule properties (#​30376)
  • azurerm_kubernetes_cluster - add support for the Ubuntu2404 OS SKU (#​32070)
  • azurerm_kubernetes_cluster - improve validation for network_profile.0.advanced_networking (#​31497)
  • azurerm_kubernetes_cluster_node_pool - add support for the Ubuntu2404 OS SKU (#​32070)
  • azurerm_kusto_attached_database_configuration - add support for the database_name_override, database_name_prefix, sharing.functions_to_exclude, and sharing.functions_to_include properties (#​31470)
  • azurerm_logic_app_standard - add support for the site_config.scm_ip_restriction_default_action property (#​32043)
  • azurerm_logic_app_standard - add support for the site_config.ip_restriction_default_action property (#​31816)
  • azurerm_mssql_elasticpool - add support for the high_availability_replica_count property (#​31761)
  • azurerm_nat_gateway - add support for the StandardV2 SKU (#​31197)
  • azurerm_public_ip - add support for the StandardV2 SKU (#​31197)
  • azurerm_public_ip_prefix - add support for the StandardV2 SKU (#​31197)

BUG FIXES:

  • azurerm_backup_policy_vm - fix the Update function to properly set all timestamps when any of backup.time, retention_daily, retention_weekly, retention_montly, or retention_yearly change (#​31969)
  • azurerm_cosmosdb_account - fix an API error caused by backup.interval_in_minutes and backup.retention_in_hours being set to 0 in the API payload when not defined in config (#​32037)
  • azurerm_machine_learning_compute_instance - fix setting node_public_ip_enabled into state (#​31725)
  • azurerm_search_service - mark query_keys.key value as sensitive (#​32053) (#​32053)

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Apr 3, 2026
@renovate renovate bot enabled auto-merge (squash) April 3, 2026 07:50
@renovate renovate bot added the dependencies label Apr 3, 2026
@hmcts-jenkins-d-to-i
Copy link
Copy Markdown
Contributor

Plan Result (aat)

Plan: 0 to add, 7 to change, 0 to destroy.
  • Update
    • azurerm_key_vault_secret.flexible_secret["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret["HOST"]
    • azurerm_key_vault_secret.flexible_secret["PASS"]
    • azurerm_key_vault_secret.flexible_secret["PORT"]
    • azurerm_key_vault_secret.flexible_secret["USER"]
    • azurerm_key_vault_secret.storage_account_connection_string_secret
    • module.storage_account.azurerm_storage_account.storage_account
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:53:36Z" -> (known after apply)
        id                      = "https://fact-kv-aat.vault.azure.net/secrets/data-api-POSTGRES-DATABASE/5fe9e2f3706c40d297eb73056f798184"
        name                    = "data-api-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:53:36Z" -> (known after apply)
        id                      = "https://fact-kv-aat.vault.azure.net/secrets/data-api-POSTGRES-HOST/20053128bea8460abb4cc7c98495e1e1"
        name                    = "data-api-POSTGRES-HOST"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:53:36Z" -> (known after apply)
        id                      = "https://fact-kv-aat.vault.azure.net/secrets/data-api-POSTGRES-PASS/aed26a9687194780be5cf3f08196d86c"
        name                    = "data-api-POSTGRES-PASS"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:53:36Z" -> (known after apply)
        id                      = "https://fact-kv-aat.vault.azure.net/secrets/data-api-POSTGRES-PORT/b8d1610eb73e42dc86d2a0ed02f00e3c"
        name                    = "data-api-POSTGRES-PORT"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:53:36Z" -> (known after apply)
        id                      = "https://fact-kv-aat.vault.azure.net/secrets/data-api-POSTGRES-USER/3e468586372249df91306e52cd96a673"
        name                    = "data-api-POSTGRES-USER"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.storage_account_connection_string_secret will be updated in-place
  ~ resource "azurerm_key_vault_secret" "storage_account_connection_string_secret" {
      ~ expiration_date         = "2028-03-31T07:53:48Z" -> (known after apply)
        id                      = "https://fact-kv-aat.vault.azure.net/secrets/storage-account-connection-string/7d71c9e3ea714f98839ec081591976e0"
        name                    = "storage-account-connection-string"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api Storage account"
        }
        # (10 unchanged attributes hidden)
    }

  # module.storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/fact-aat/providers/Microsoft.Storage/storageAccounts/factsaaat"
        name                               = "factsaaat"
        tags                               = {
            "application"         = "find-a-court-or-tribunal"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "staging"
            "managedBy"           = "Find a Court or Tribunal"
        }
        # (97 unchanged attributes hidden)

      + network_rules {
          + bypass         = [
              + "AzureServices",
            ]
          + default_action = "Allow"
        }

        # (3 unchanged blocks hidden)
    }

Plan: 0 to add, 7 to change, 0 to destroy.

@hmcts-jenkins-d-to-i
Copy link
Copy Markdown
Contributor

Plan Result (prod)

Plan: 0 to add, 7 to change, 0 to destroy.
  • Update
    • azurerm_key_vault_secret.flexible_secret["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret["HOST"]
    • azurerm_key_vault_secret.flexible_secret["PASS"]
    • azurerm_key_vault_secret.flexible_secret["PORT"]
    • azurerm_key_vault_secret.flexible_secret["USER"]
    • azurerm_key_vault_secret.storage_account_connection_string_secret
    • module.storage_account.azurerm_storage_account.storage_account
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:58:44Z" -> (known after apply)
        id                      = "https://fact-kv-prod.vault.azure.net/secrets/data-api-POSTGRES-DATABASE/ec9975470c1e40ebabb2f307dd746100"
        name                    = "data-api-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:58:44Z" -> (known after apply)
        id                      = "https://fact-kv-prod.vault.azure.net/secrets/data-api-POSTGRES-HOST/a96c1a916c754ce59697f975270818e0"
        name                    = "data-api-POSTGRES-HOST"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:58:44Z" -> (known after apply)
        id                      = "https://fact-kv-prod.vault.azure.net/secrets/data-api-POSTGRES-PASS/89227e22920440298440aff3f66fa154"
        name                    = "data-api-POSTGRES-PASS"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:58:44Z" -> (known after apply)
        id                      = "https://fact-kv-prod.vault.azure.net/secrets/data-api-POSTGRES-PORT/0e66f4133fdf403b8c6dc817c22170ad"
        name                    = "data-api-POSTGRES-PORT"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret" {
      ~ expiration_date         = "2028-03-31T07:58:44Z" -> (known after apply)
        id                      = "https://fact-kv-prod.vault.azure.net/secrets/data-api-POSTGRES-USER/e780bebe95cf48f48548de704b7a7c88"
        name                    = "data-api-POSTGRES-USER"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api PostgreSQL"
        }
        # (10 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.storage_account_connection_string_secret will be updated in-place
  ~ resource "azurerm_key_vault_secret" "storage_account_connection_string_secret" {
      ~ expiration_date         = "2028-03-31T07:58:57Z" -> (known after apply)
        id                      = "https://fact-kv-prod.vault.azure.net/secrets/storage-account-connection-string/37e75af7af4543edb662288800101f2b"
        name                    = "storage-account-connection-string"
        tags                    = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
            "source"              = "data-api Storage account"
        }
        # (10 unchanged attributes hidden)
    }

  # module.storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/fact-prod/providers/Microsoft.Storage/storageAccounts/factsaprod"
        name                               = "factsaprod"
        tags                               = {
            "application"         = "find-a-court-or-tribunal"
            "builtFrom"           = "https://github.com/HMCTS/fact-data-api.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#fact-tech"
            "environment"         = "production"
            "managedBy"           = "Find a Court or Tribunal"
        }
        # (97 unchanged attributes hidden)

      + network_rules {
          + bypass         = [
              + "AzureServices",
            ]
          + default_action = "Allow"
        }

        # (3 unchanged blocks hidden)
    }

Plan: 0 to add, 7 to change, 0 to destroy.

@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 352c510 to 35c5874 Compare April 7, 2026 06:50
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 7, 2026

@renovate renovate bot merged commit 5bb8741 into master Apr 7, 2026
9 checks passed
@renovate renovate bot deleted the renovate/azurerm-4.x branch April 7, 2026 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants