FEATURES:
- New Resource: incapsula_bots_configuration
IMPROVEMENTS:
- incapsula_incap_rule - Support overrideExisting Flag (#244)
- incapsula_account_policy_association - added available_policy_ids optional argument + move to v3 apis to improve performance (#250)
BUG FIXES:
- Fix issue #234 - remove omitempty for boolean fields (#247)
BUG FIXES:
- adding current account id support to incapsula_policy_asset_association (#243)
BUG FIXES:
- policy resource fails to read when account_id param is not provided (#240)
BUG FIXES:
- Fix account ssl settings resource documentation (#238)
FEATURES:
- New Resource: incapsula_account_ssl_settings
Deprecations: wildcard_san_for_new_sites, naked_domain_san_for_new_www_sites and support_all_tls_versions in account resource are now deprecated, matched arguments in the account SSL settings resource should be used instead
BUG FIXES:
- Adding account status response to the client object. This allows to have the account context on any client request. (#232)
- Adding account type to the account status response. (#232)
- Adding current account to the policy actions. This allows a reseller to manage its accounts' policies (#232)
BUG FIXES:
- documentation corrections (#229)
FEATURES:
- New Resource:
incapsula_mtls_client_to_imperva_ca_certificate
- New Resource:
incapsula_mtls_client_to_imperva_ca_certificate_site_settings
- New Resource:
incapsula_mtls_client_to_imperva_ca_certificate_site_association
BUG FIXES:
- fix documentation of api_security_api_config (#224)
BUG FIXES:
- remove future resource from the documentation (#219)
IMPROVEMENTS:
- incapsula_subaccount: Support for setting default data region for subaccounts (#207)
BUG FIXES:
- incapsula_policy: fixing bug that clears policy account's defaults when updating policy resource. (#211)
- The parameters
incapsula_site.restricted_cname_reuse
andinvalid_param_name_violation_action
in allincapsula_api_security
resources should not be used as they are currently not supported (will be in the future) (#215)
BUG FIXES:
- Add retries of read operations when fail (#200)
- incapsula_api_security_site_config: make is_automatic_discovery_api_integration_enabled optional to align with BE API (#205)
BUG FIXES:
- incapsula_subaccount: fix 'read' method to use another API to the backend (#197)
BUG FIXES:
- remove future resource from the documentation (#195)
BUG FIXES:
- incapsula_application_delivery: return ports to default upon deleting the resource (#189)
IMPROVEMENTS:
- incapsula_site: Add cname option to domain validation options
BUG FIXES:
- incapsula_account_policy_association: change default_waf_policy_id to be optional - for customers who have not migrated yet to waf policy (#185)
- incapsula_site: change default values from string to bool (#186)
FEATURES:
-
New Resource:
incapsula_account-policy-association
-
New Resource:
incapsula_application_delivery
-
New Resource:
incapsula_site_monitoring
-
New DataSource:
account-data
FEATURES:
- New Resource:
incapsula_waf_log_setup
FEATURES:
- New Resource:
incapsula_custom_hsm_certificate
IMPROVEMENTS:
- Add deprecation message to already deprecated resources (old data_center resources)
BUG FIXES:
- incapsula_site: formatting parameters with %t fails if the values are strings, not bool (#158)
- incapsula_site: add retries when configuring site after creating it - to allow the site creation to fully finish (#165)
- incapsula_notification_center_policy: Fix redundant slash in path issue (#162)
- incapsula_origin_pop: avoid crashing when upgrading from version 2* to 3* without changing the resource format in the state file(#167)
BUG FIXES:
- Fix a bug where naked_domain_san and wildcard_san attributes on site resource weren't handled by 'modify' method
FEATURES:
- New Resource:
CSP_Site_configuration
,CSP_Site_domain
IMPROVEMENTS:
- Add operation type to HTTP client calls
- Fix acceptance test for Custom Certificate resource
- Add support for notification center
- Fix bug in Custom Certificate resource
- Fix pagination bug in sub-account resource
- Edit business logic, add acceptance test for incapsula_txt_record resource
- No Changes were detected
- SubAccount resource addition (incapsula_subaccount)
- Support 'force-risky-operation' header for cache settings
- Fix custom_certificate resource: remove 'ForceNew' and unecessary base64 encoding
- Fix
perf_response_cache_404_time
in thesite
resource. Validate if its value is divisible by 60 - Make
original_data_center_id
deprecated in thesite
resource - Add "ForceNew" for
method
andpath
arguments in theapi_security_endpoint_config
resource
- Support API-Security with new resources: api_security_api_config, api_security_endpoint_config, api_security_site_config
- Fix TTL attribute of incap_rule resource: enable zero as value
- New attribute on site resource: strict_cname_reuse
- New resource: data_centers_configuration
- Remove unnecessary 'ForceNew' from attributes of site resource
- Fix
acceleration_level
in thesite
resource - Fix support for
continents
in thesecurity_rule_exception
resource - Fix the default value for
seal_location
in thesite
resource - Fix documentation for the
security_rule_exception
resource - Add TF provider version to HTTP client calls
- Add new
incap_rule
properties andRULE_ACTION_FORWARD_TO_PORT
action - Fix
security_rule_exception
import - Fix redundant
data_center_server
whenenabled=false
- Fix
origin_pop
import - Add
policy_asset_association
import - Fix
site
resource to use thelogs_account_id
for various methods (read/update) - Fix
site
resource to read/updateseal_location
- Fixed
naked_domain_san
andwildcard_san
on thesite
resource. - Adding edit
server_address
ability todata_center
resource. - Updating several resources parameters to include
ForceNew
.
- Add retry logic to
site
anddata_center
resources - Set the
dns_record_name
in thesite
resource - Add the
naked_domain_san
in thesite
resource - Add the
wildcard_san
in thesite
resource - Update type
PerformanceSettings
struct to omit when empty except the mode_level - Add
txt_record_value_*
resource - Update the
site
resource valuesite_ip
to be computed - Fix the
site_ip
to store in state file - Fix
data_storage_region
issue inaccount
resource, defaults toUS
- Set the
log_level
in thesite
resource to be optional - Fix
omitempty
issues inclient_performance
- Fix documentation bug for
account
resource
- Fix documentation bug for origin POP codes
- Add support for setting the data center's origin POP with a new synthetic resource
- Fix a bug on setting
is_content
on thedata_center
resource - Remove old
acl_security_rule
resource as it has been migrated to thepolicy
resource - Update all documentation to include all import operations
- Provider fixes
parameters
on SQL Injection Security Exception resource - Merged support for account creation (used by re-sellers) w/ fixes
- Provider has landed in the Terraform Registry
- Cleared out old GitHub workflows
- Add support for policy management
- Add support for performance settings in the
site
resource
- Add support for site masking settings
- Add support for specifying the log level on a site
- Re-factor internal site resource (lots of copy/pasta in create and update)
- Fix an issue with computed and optional attributes for
data_storage_region
- Configure
site
resource values during an update for:active
,acceleration_level
,seal_location
,domain_redirect_to_full
,remove_ssl
,ignore_ssl
- Add support for setting the data storage region on a site
- Remove the deprecated setting for
is_standby
on thedata_center
resource (is_enabled
replaces this functionality); should resolve flapping integration tests + potential production issues - Properly configuring
site
resource values for:active
,acceleration_level
,seal_location
,domain_redirect_to_full
,remove_ssl
,ignore_ssl
- Added
domain_verification
as an exported variable for thesite
resource
- Add support for cache rules
- Improve documentation
- Fix Incap Rule example bugs
Add checks for resource destruction during reads. The following resources have been updated:
- ACL Security Rule
- Certificate
- Data Center
- Data Center Server
- Incap Rule
- Security Rule Exception
- Site
- WAF Security Rule
As we near certification readiness, we've made lots of changes to the provider. Backwards incompatible changes have been made to the Incap Rule resources. Please review the documentation. Changes below:
- All acceptance and unit tests now pass. There was a race condition issue with dependencies - see this Hashicorp issues: hashicorp/terraform#23169 and hashicorp/terraform#23635
- Migrate
resource_incap_rule
to use APIv2. See updated documentation and example files for the latest resource spec. - Add fixes for data center and data center server result codes (oscillation between strings and ints)
- Fix importing of various resources: data center, data center server, Incap Rule, etc.
- Fix ceriticate argument requirements (thanks @areifert)
- Added GitHub workflow integration for side builds prior to certification (thanks @pklime2)
- Upgrade to Terraform v0.12
- Migrate to standalone Terraform SDK
- Started to improve consistency of error log messages (Site IDs, Rule IDs, etc.)
Initial release of the Incapsula Terraform Provider.