[cloudflare_ruleset] allow overriding ruleset sensitivity

[peterbppb]

Current Terraform and Cloudflare provider version

3.20.0

Description

Currently setting Ruleset sensitivity is not supported at the ruleset level.
Only setting individual rules sensitivity is supported.
I would like to be able to override ruleset sensitivity, same as ruleset Action:

Use cases

Having the ability to set sensitivity_level for the whole ruleset, making sure new rules added to the ddos_l7 ruleset will inherit this sensitivity level.

Potential Terraform configuration

terraform {
  required_providers {
    cloudflare = {
      source  = "cloudflare/cloudflare"
      version = "~> 3.0"
    }
  }

  required_version = ">= 1.0"
}

variable "zone_id" {
  type        = string
  description = "Cloudflare Zone ID"
}

variable "ruleset_id" {
  type        = string
  description = "Cloudflare Zone Ruleset ID"
}
/*
"{rule_id}" = {
  description       = ""
  sensitivity_level = "medium"
  action            = "log"
}
*/
variable "rules" {
  type = map(object({
    description       = string
    sensitivity_level = string
    action            = string
  }))
  description = "List of L7 DDOS rules to override"

}

resource "cloudflare_ruleset" "zone_level_ddos_config" {
  zone_id     = var.zone_id
  name        = "HTTP DDoS Attack Protection entry point ruleset"
  description = ""
  kind        = "zone"
  phase       = "ddos_l7"

  rules {
    action = "execute"
    action_parameters {
      id = var.ruleset_id
      overrides {
        action            = "log"
        sensitivity_level = "eoff"
        dynamic "rules" {
          for_each = var.rules
          content {
            id                = rules.key
            sensitivity_level = rules.value.sensitivity_level
            action            = rules.value.action
            description       = rules.value.description
          }
        }
      }
    }
    expression  = "true"
    description = "Override the HTTP DDoS Attack Protection Managed Ruleset"
    enabled     = true
  }
}

References

No response

[github-actions]

This functionality has been released in v3.26.0 of the Terraform Cloudflare Provider.

Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!