feat(terraform/cloudflare): migrate Cloudflare provider v4 to v5 (BOXP-122) - #11342
Merged
boxp merged 97 commits intoJul 23, 2026
Conversation
- Update all provider version constraints from ~> 4.52 to ~> 5.0 - Rename v4 resources to v5 equivalents: cloudflare_record to cloudflare_dns_record cloudflare_access_application to cloudflare_zero_trust_access_application cloudflare_access_policy to cloudflare_zero_trust_access_policy cloudflare_access_service_token to cloudflare_zero_trust_access_service_token cloudflare_tunnel to cloudflare_zero_trust_tunnel_cloudflared cloudflare_tunnel_config to cloudflare_zero_trust_tunnel_cloudflared_config - Add moved.tf blocks for state migration in each module - Replace cloudflare_page_rule with cloudflare_ruleset (http_request_redirect) - Fix grafana dns.tf: value attribute to content Closes BOXP-122 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
boxp
force-pushed
the
codex-task-board/BOXP-122-20260721T094425Z-442d8200-2ba2-4b0f-ab6c-df9950826c63
branch
from
July 21, 2026 09:57
00b22a9 to
cc39bd7
Compare
boxp-tfaction
Bot
added
terraform/cloudflare/b0xp.io/stable-diffusion
terraform/cloudflare/b0xp.io/k8s
terraform/cloudflare/b0xp.io/grafana
terraform/cloudflare/b0xp.io/hitohub/prod
terraform/cloudflare/b0xp.io/portfolio
terraform/cloudflare/b0xp.io/kubernetes-dashboard
terraform/cloudflare/b0xp.io/hitohub/stage
terraform/cloudflare/b0xp.io/minecraft
terraform/cloudflare/boxp.tk
terraform/cloudflare/b0xp.io/longhorn
terraform/cloudflare/boxp.tk/hitohub/prod
terraform/cloudflare/b0xp.io/argocd
terraform/cloudflare/b0xp.io/bastion
terraform/cloudflare/b0xp.io/prometheus-operator
terraform/cloudflare/b0xp.io/moltworker
terraform/cloudflare/b0xp.io/openclaw
terraform/cloudflare/boxp.tk/portfolio
terraform/cloudflare/boxp.tk/hitohub/stage
terraform/cloudflare/b0xp.io/hermes-agent
terraform/cloudflare/b0xp.io/video-rotator
labels
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This was referenced Jul 23, 2026
Merged
3 tasks
boxp
pushed a commit
that referenced
this pull request
Jul 28, 2026
…source (BOXP-135) The v4→v5 provider migration (PR #11342) removed cloudflare_zero_trust_tunnel_route.codex_workspace from state via tfmigrate but never imported the v5 equivalent, causing every apply to attempt creating the 192.168.10.98/32 route and receive a 409 Conflict from Cloudflare (error 1014: route already exists). Fix: add a cloudflare_zero_trust_tunnel_cloudflared_route data source filtered by network_subset/superset to look up the existing route UUID, then use an import block to bring it into state under the v5 resource name. The data source exists in provider v5.22.0 (confirmed via provider.go registration). After a successful apply the import block becomes a no-op; a follow-up PR can remove the data source and import block. Closes follow-up PRs: #11621, #11675 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
boxp
added a commit
that referenced
this pull request
Jul 28, 2026
…source (BOXP-135) (#11700) The v4→v5 provider migration (PR #11342) removed cloudflare_zero_trust_tunnel_route.codex_workspace from state via tfmigrate but never imported the v5 equivalent, causing every apply to attempt creating the 192.168.10.98/32 route and receive a 409 Conflict from Cloudflare (error 1014: route already exists). Fix: add a cloudflare_zero_trust_tunnel_cloudflared_route data source filtered by network_subset/superset to look up the existing route UUID, then use an import block to bring it into state under the v5 resource name. The data source exists in provider v5.22.0 (confirmed via provider.go registration). After a successful apply the import block becomes a no-op; a follow-up PR can remove the data source and import block. Closes follow-up PRs: #11621, #11675 Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Cloudflare Terraform provider を v4.52 から v5 にアップグレードする。
変更内容
テスト計画
Closes BOXP-122