cloudflare/terraform-provider-cloudflare v5.13.0

v5.13.0

Repository: cloudflare/terraform-provider-cloudflare

Tag: v5.13.0

Published: 2025-11-21T09:27:00Z

Prerelease: no

Release notes:

5.13.0 (2025-11-21)

Full Changelog: v5.12.0...v5.13.0

⚠ BREAKING CHANGES: cloudflare_api_token & cloudflare_account_token Schema Update

The 5.13 release includes major updates to the cloudflare_api_token resource to eliminate configuration drift caused by policy ordering differences in the Cloudflare API.

Fixes: cloudflare/terraform-provider-cloudflare#6092

Whats changed

• policies are now a Set; order is ignored to prevent drift.
• When defining a policy, resources must use jsonencode(); all policy resource values must now be JSON-encoded strings.
• Removed fields: id, name, and meta have been removed from policy blocks.

Required Action (v5.13+) Customers looking to upgrade to v5.13+ must update all cloudflare_api_token & cloudflare_account_token resources to wrap policy resource values in jsonencode()

Before:

resources = {
"com.cloudflare.api.account.${var.cf_account_id}" = "*"
}

After:

resources = jsonencode({
"com.cloudflare.api.account.${var.cf_account_id}" = "*"
})

• account_token: token policy order and nested resources (#6440)

Features

• add new resources and data sources (7ce3dec)
• api_token+account_tokens: state upgrader and schema bump (#6472) (42f7db2)
• chore(build): point Terraform to released Go v6.3.0 (6d06b46)
• docs: make docs explicit when a resource does not have import support (02699f6)
• magic_transit_connector: support self-serve license key (#6398) (a6ec134)
• worker_version: add content_base64 support (6ff643f)
• worker_version: boolean support for run_worker_first (#6407) (116a67b)
• workers_script_subdomains: add import support (#6375) (40f7ed8)
• zero_trust_access_application: add proxy_endpoint for ZT Access Application (#6453) (177f20a)
• zero_trust_dlp_predefined_profile: Switch DLP Predefined Profile endpoints, introduce enabled_entries attribute (bc69569)
• zero_trust_tunnel_cloudflared: v4 to v5 migration tests (#6461) (ffa0fef)

Bug Fixes

• account_token: token policy order and nested resources (#6440) (86c5972)
• allow r2_bucket_event_notification to be applied twice without failing (#6419) (6fbd4c5)
• cloudflare_worker+cloudflare_worker_version: import for the resources (#6357) (b98e0be)
• dns_record: inconsistent apply error (#6452) (f289994)
• pages_domain: resource tests (#6338) (d769e29)
• pages_project: unintended resource state drift (#6377) (1a3955a)
• queue_consumer: id population (#6181) (f3c6498)
• workers_kv: multipart request (#6367) (65f8c19)
• workers_kv: updating workers metadata attribute to be read from endpoint (#6386) (3a35757)
• workers_script_subdomain: add note to cloudflare_workers_script_subdomain about redundancy with cloudflare_worker...