Skip to content

Releases: pingidentity/terraform-provider-pingone

v1.0.0-rc1

25 Jun 14:46
8e04c16
Compare
Choose a tag to compare

IMPORTANT This v1.0.0-rc1 release is a pre-release (candidate) build and is not stable for production use. The latest stable build for production use is v0.29. The documentation for v0.29 can be found here.

IMPORTANT This v1.0.0-rc1 release is a pre-release (candidate) build that contains breaking changes to the PingOne Terraform schema. This candidate build can be used prepare HCL for the upgrade from v0.* to v1.* of the provider. Please review the upgrade guide for details on handling breaking changes to the PingOne Terraform schema.

IMPORTANT This v1.0.0-rc1 release is a pre-release (candidate) build and can be used prepare HCL for the upgrade from v0.* to v1.* of the provider. If you find bugs in this build, please raise an issue to the provider maintainers.

BREAKING CHANGES:

  • Removed the provider parameter force_delete_production_type. Use the global_options.environment.production_type_force_delete parameter going forward. (#787)
  • Renamed the pingone_mfa_policies data source to pingone_mfa_device_policies. (#788)
  • Renamed the pingone_mfa_policy resource to pingone_mfa_device_policy. (#788)
  • Renamed the pingone_role_assignment_user resource to pingone_user_role_assignment. (#843)
  • Replaced the region parameter (and PINGONE_REGION environment variable) with region_code (defaulted with the PINGONE_REGION_CODE environment variable). See the Upgrade Guide for details. (#828)
  • data-source/pingone_application: Changed the access_control_group_options attribute data type. (#682)
  • data-source/pingone_application: Changed the external_link_options attribute data type. (#682)
  • data-source/pingone_application: Changed the icon attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options.certificate_based_authentication attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options.cors_settings attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options.mobile_app.integrity_detection.cache_duration attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options.mobile_app.integrity_detection.google_play attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options.mobile_app.integrity_detection attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options.mobile_app attribute data type. (#682)
  • data-source/pingone_application: Changed the oidc_options attribute data type. (#682)
  • data-source/pingone_application: Changed the saml_options.cors_settings attribute data type. (#682)
  • data-source/pingone_application: Changed the saml_options.idp_signing_key attribute data type. (#682)
  • data-source/pingone_application: Changed the saml_options.sp_verification (#682)
  • data-source/pingone_application: Changed the saml_options attribute data type. (#682)
  • data-source/pingone_application: Removal of deprecated attribute saml_options.sp_verification_certificate_ids. Use the saml_options.sp_verification.certificate_ids attribute going forward. (#681)
  • data-source/pingone_application: Removed oidc_options.client_id and oidc_options.client_secret. Use the pingone_application_secret resource or data source going forward. (#781)
  • data-source/pingone_environment: Changed the service.bookmark parameter data type and renamed to services.bookmarks. (#665)
  • data-source/pingone_environment: Changed the service parameter data type and renamed to services. (#665)
  • data-source/pingone_flow_policies: Changed the data_filter parameter data type and renamed to data_filters. (#664)
  • data-source/pingone_flow_policy: Changed the davinci_application and trigger computed attribute data types from list block to single object types. (#795)
  • data-source/pingone_gateway: Changed the user_type data type from a set of objects to a map of objects and renamed to user_types. (#798)
  • data-source/pingone_gateway: Renamed radius_client to radius_clients and changed data type from block set to set of objects. (#798)
  • data-source/pingone_gateway: Renamed user_type.push_password_changes_to_ldap to user_types.allow_password_changes. (#798)
  • data-source/pingone_gateway: Renamed user_type.user_migation.attribute_mapping to user_types.new_user_lookup.attribute_mappings and changed data type from block set to set of objects. (#798)
  • data-source/pingone_gateway: Renamed user_type.user_migation to user_types.new_user_lookup and changed data type from block set to single object. (#798)
  • data-source/pingone_gateway: Renamed user_type.user_migration.lookup_filter_pattern to user_types.new_user_lookup.ldap_filter_pattern. (#798)
  • data-source/pingone_groups: Changed the data_filter parameter data type and renamed to data_filters. (#677)
  • data-source/pingone_licenses: Changed the data_filter parameter data type and renamed to data_filters. (#730)
  • data-source/pingone_organization: Removal of deprecated platform URL computed attributes. Consider using the PingOne Utilities module going forward. (#628)
  • data-source/pingone_password_policy: Moved password_age.max to password_age_max. (#801)
  • data-source/pingone_password_policy: Moved password_age.min to password_age_min. (#801)
  • data-source/pingone_password_policy: Removed ineffectual bypass_policy. (#801)
  • data-source/pingone_password_policy: Renamed account_lockout to lockout. (#801)
  • data-source/pingone_password_policy: Renamed environment_default to default. (#801)
  • data-source/pingone_password_policy: Renamed exclude_commonly_used_passwords to excludes_commonly_used_passwords. (#801)
  • data-source/pingone_password_policy: Renamed exclude_profile_data to excludes_profile_data. (#801)
  • data-source/pingone_password_policy: Renamed password_history to history. (#801)
  • data-source/pingone_password_policy: Renamed password_length to length. (#801)
  • data-source/pingone_populations: Changed the data_filter parameter data type and renamed to data_filters. (#664)
  • data-source/pingone_trusted_email_domain_dkim: Removed unnecessary id attribute. ([#...
Read more

v0.29.1

24 Jun 12:13
3e97556
Compare
Choose a tag to compare

BUG FIXES:

  • resource/pingone_resource_scope: Fixed blocking errors that result from removing multiple resource scopes that are already assigned to an application. (#854)

What's Changed

  • Add mutex to avoid parallel destroy of resource scopes (0.29.1) by @patrickcping in #854

Full Changelog: v0.29.0...v0.29.1

v0.29.0

19 Jun 09:15
41003d8
Compare
Choose a tag to compare

NOTES:

  • bump github.com/hashicorp/terraform-plugin-framework 1.8.0 => 1.9.0 (#842)
  • bump github.com/hashicorp/terraform-plugin-go 0.22.2 => 0.23.0 (#842)
  • bump github.com/hashicorp/terraform-plugin-mux 0.15.0 => 0.16.0 (#842)
  • bump github.com/hashicorp/terraform-plugin-sdk/v2 2.33.0 => 2.34.0 (#842)
  • bump github.com/hashicorp/terraform-plugin-testing 1.7.0 => 1.8.0 (#842)
  • bump github.com/patrickcping/pingone-go-sdk-v2/authorize 0.4.1 => 0.5.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2/credentials 0.7.0 => 0.8.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management 0.39.0 => 0.40.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management 0.40.0 => 0.41.0 (#842)
  • bump github.com/patrickcping/pingone-go-sdk-v2/mfa 0.18.3 => 0.19.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk 0.14.1 => 0.15.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk 0.15.0 => 0.15.1 (#842)
  • bump github.com/patrickcping/pingone-go-sdk-v2/verify 0.4.1 => 0.5.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.11.9 => 0.12.0 (#827)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.12.0 => 0.12.1 (#842)

ENHANCEMENTS:

  • data_source/pingone_application: Added support for encrypted SAML application assertions. (#840)
  • resource/pingone_application: Added support for encrypted SAML application assertions. (#840)

BUG FIXES:

  • resource/pingone_risk_predictor: Fixed issue that forced replacement of a resource if a mutable field changed within a "resource type" object. (#838)

What's Changed

Full Changelog: v0.28.0...v0.29.0

v0.28.0

13 May 09:48
cfe045d
Compare
Choose a tag to compare

NOTES:

  • resource/pingone_credential_issuance_rule: A credential_issuance_rule cannot be assigned to a credential_type that has a management_mode of MANAGED. (#804)
  • bump github.com/hashicorp/terraform-plugin-framework 1.7.0 => 1.8.0 (#810)
  • bump github.com/hashicorp/terraform-plugin-go 0.22.1 => 0.22.2 (#810)
  • bump github.com/patrickcping/pingone-go-sdk-v2/credentials 0.6.2 => 0.7.0 (#810)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management 0.38.0 => 0.39.0 (#810)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.11.8 => 0.11.9 (#810)
  • bump golang.org/x/net 0.22.0 => 0.23.0 (#810)

ENHANCEMENTS:

  • data_source/pingone_credential_type: Added support for the management_mode and metadata.fields.required properties. (#804)
  • resource/pingone_credential_type: Added support for the management_mode and metadata.fields.required properties. (#804)

What's Changed

  • Bump golang.org/x/net from 0.19.0 to 0.23.0 in /tools by @dependabot in #790
  • Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.4 in /tools by @dependabot in #799
  • Bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #800
  • bump go modules 2024-05-10 by @patrickcping in #810
  • Support management.mode add metadata.fields.required properties in credential_type. by @mjspi in #804
  • Bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #814
  • Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 by @dependabot in #813

Full Changelog: v0.27.1...v0.28.0

v0.27.1

12 Apr 16:17
6cdb7dd
Compare
Choose a tag to compare

BUG FIXES:

  • resource/pingone_language: Updated the list of languages that are reserved in the platform. (#783)
  • resource/pingone_notification_settings_email: Fixed panic crash when attempting to import environment default notification email settings. (#782)
  • resource/pingone_notification_template_content: Fixed Invalid import ID specified error when attempting to import credential_issued and verification_code_template templates. (#778)
  • resource/pingone_notification_template_content: Fixed expected length of content to be in the range (1 - 153) error when attempting to import longer length SMS templates configured in the console. (#780)

What's Changed

  • resource/pingone_notification_template_content: Fixed Invalid import ID specified error when attempting to import credential_issued and verification_code_template templates by @patrickcping in #778
  • resource/pingone_notification_template_content: Fix expected length of content to be in the range (1 - 153) error when attempting to import longer length SMS templates configured in the console. by @patrickcping in #780
  • resource/pingone_notification_settings_email: Fix panic crash when attempting to import environment default notification email settings by @patrickcping in #782
  • resource/pingone_language: Update the list of languages that are reserved in the platform by @patrickcping in #783

Full Changelog: v0.27.0...v0.27.1

v0.27.0

26 Mar 13:45
ed50200
Compare
Choose a tag to compare

NOTES:

  • Deprecated the force_delete_production_type provider parameter. This parameter will be removed in the next major release. Please use the global_options.population.contains_users_force_delete provider parameter going forward. Use of this provider option may result in loss of user data - use with caution. (#773)
  • resource/pingone_environment: Code optimisation on plan modification. (#773)
  • bump github.com/hashicorp/terraform-plugin-framework 1.5.0 => v1.6.1 (#766)
  • bump github.com/hashicorp/terraform-plugin-framework 1.6.1 => 1.7.0 (#771)
  • bump github.com/hashicorp/terraform-plugin-go 0.21.0 => 0.22.1 (#766)
  • bump github.com/hashicorp/terraform-plugin-mux 0.13.0 => 0.15.0 (#766)
  • bump github.com/hashicorp/terraform-plugin-sdk/v2 2.31.0 => 2.33.0 (#766)
  • bump github.com/hashicorp/terraform-plugin-testing 1.6.0 => 1.7.0 (#766)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management 0.37.0 => 0.38.0 (#766)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk 0.13.0 => 0.14.0 (#766)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk 0.14.0 => 0.14.1 (#771)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.11.6 => 0.11.7 (#766)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.11.7 => 0.11.8 (#771)
  • bump google.golang.org/protobuf 1.32.0 => 1.33.0 (#766)

ENHANCEMENTS:

  • Added global_options provider parameter block to be able to override specific API behaviours. (#773)
  • Added the global_options.population.contains_users_force_delete provider parameter to be able to force-delete populations if they contain users in sandbox environments. Use of this provider option may result in loss of user data - use with caution. (#773)
  • data-source/pingone_application: Added support for PRIVATE_KEY_JWT (with oidc_options.jwks and oidc_options.jwks_url attributes) and CLIENT_SECRET_JWT token endpoint authentication methods for OIDC applications. (#769)
  • data-source/pingone_application: Added support for the saml_options.default_target_url property for SAML applications. (#768)
  • data_source/pingone_verify_policy: Added support for inspection_type property in government_id configuration object. (#754)
  • resource/pingone_application: Added support for PRIVATE_KEY_JWT (with oidc_options.jwks and oidc_options.jwks_url optional properties) and CLIENT_SECRET_JWT token endpoint authentication methods for OIDC applications. (#769)
  • resource/pingone_application: Added support for the saml_options.default_target_url property for SAML applications. (#768)
  • resource/pingone_verify_policy: Added support for inspection_type property in government_id configuration object. (#754)

BUG FIXES:

  • resource/pingone_user: Fixed error when attempting to move a user between populations by changing the population_id value. (#770)

What's Changed

  • pingone_verify_policy: add support for inspection_type property in government_id configuration object. by @mjspi in #754
  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools by @dependabot in #762
  • Bump go modules 2024-03-15 by @patrickcping in #766
  • pingone_application: Added support for saml_options.default_target_url property by @patrickcping in #768
  • pingone_application: Add support for PRIVATE_KEY_JWT and CLIENT_SECRET_JWT token endpoint auth methods by @patrickcping in #769
  • Fix error when attempting to move a user between populations by @patrickcping in #770
  • bump modules 2024-03-25 by @patrickcping in #771
  • Add global options to provider configuration, including the ability to force delete populations if they contain users by @patrickcping in #773

Full Changelog: v0.26.1...v0.27.0

v0.26.1

28 Feb 09:21
6b89fda
Compare
Choose a tag to compare

NOTES:

  • resource/pingone_credential_issuer_profile: Added customisable timeout for resource creation, used to tune the polling of a platform bootstrapped credential issuer profile, before one is forcefully created. (#752)
  • resource/pingone_notification_policy: Corrected documentation HCL examples. (#747)
  • resource/pingone_sign_on_policy: Migrated to plugin framework. (#747)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management 0.36.0 => 0.37.0 (#746)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk 0.12.2 => 0.13.0 (#746)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.11.5 => 0.11.6 (#746)

BUG FIXES:

  • resource/pingone_credential_issuer_profile: Fixed race condition leading to a "A resource with the specified name already exists" error when creating a credential issuer profile at the same time as creating a new environment. (#752)
  • resource/pingone_key: Fixed unnecessary replacement plan when certain properties are modified. (#747)
  • resource/pingone_mfa_fido2_policy: Resource can now be modified with Terraform if the default property is modified to true in the console or by API directly. (#747)
  • resource/pingone_notification_policy: The resource can now be modified with Terraform if the default property is modified to true in the console or by API directly. (#747)
  • resource/pingone_password_policy: Updated the validation rule to allow the user's minimum password length to be set between 8 and 32 characters (inclusive) long. (#740)
  • resource/pingone_risk_policy: Fix for predictors, that are not configured in the policy, get included with a weight/score of 0. (#751)
  • resource/pingone_risk_policy: Fixed "Cannot find risk predictor from compact name" error when applying a policy containing "bot detection", "new device" or "adversary in the middle" predictors. (#748)
  • resource/pingone_risk_policy: Provider now waits for confirmation that, on destroy, the risk policy has been successfully removed in the environment. (#748)
  • resource/pingone_risk_policy: Resource can now be modified with Terraform if the default property is modified to true in the console or by API directly. (#747)
  • resource/pingone_sign_on_policy: Resource can now be modified with Terraform if the default property is modified to true in the console or by API directly. (#747)
  • resource/pingone_verify_policy: Resource can now be modified with Terraform if the default property is modified to true in the console or by API directly. (#747)

What's Changed

  • Add acctest skip for environments with unverified email domains by @patrickcping in #731
  • Bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #734
  • resource/pingone_password_policy: Update minimum password length validation by @patrickcping in #740
  • bump pingone modules 2024-02-26 by @patrickcping in #746
  • Allow resources to be modified with Terraform if the default property is modified to true by @patrickcping in #747
  • Fix "Cannot find risk predictor from compact name" error by @patrickcping in #748
  • resource/pingone_risk_policy: Fix unconfigured predictors with weight/score of 0 by @patrickcping in #751
  • Fix "resource with the specified name already exists" error by @patrickcping in #752

Full Changelog: v0.26.0...v0.26.1

v0.26.0

31 Jan 10:24
cee537f
Compare
Choose a tag to compare

NOTES:

  • data-source/pingone_licenses: Migrated to plugin framework. (#728)
  • bump github.com/google/uuid 1.5.0 => 1.6.0 (#729)
  • bump github.com/hashicorp/terraform-plugin-framework 1.4.2 => 1.5.0 (#729)
  • bump github.com/hashicorp/terraform-plugin-go 0.20.0 => 0.21.0 (#729)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management 0.35.0 => 0.36.0 (#729)
  • bump github.com/patrickcping/pingone-go-sdk-v2 0.11.4 => 0.11.5 (#729)

FEATURES:

  • New Data Source: pingone_application_flow_policy_assignments (#727)
  • New Data Source: pingone_application_sign_on_policy_assignments (#727)
  • New Resource: pingone_identity_propagation_plan (#726)

ENHANCEMENTS:

  • resource/pingone_notification_policy: Added support for Email delivery method quotas. (#722)
  • resource/pingone_notification_template_content: Added support for credential_verification and new_device_paired notification templates. (#720)

BUG FIXES:

  • data-source/pingone_licenses: Fixed data_filter.name defined as an optional parameter. The data_filter.name parameter is now required when defining the data_filter block. (#728)
  • resource/pingone_sign_on_policy_action: Corrected the "login" sign on policy action error messages when configuring a gateway with missing configuration. (#721)

What's Changed

Full Changelog: v0.25.1...v0.26.0

v0.25.1

15 Jan 09:29
6557be9
Compare
Choose a tag to compare

NOTES:

  • Added the ability to append custom information (by environment variable) to the default user agent string sent with every API request. See registry documentation for details. (#708)
  • Upgrade go to v1.21. (#707)
  • resource/pingone_environment: Added ability to override region parameter validation with custom values. (#706)
  • bump github.com/cloudflare/circl 1.3.6 => 1.3.7 (#711)
  • bump github.com/patrickcping/pingone-go-sdk-v2/agreementmanagement v0.3.0 => v0.3.1 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2/authorize v0.4.0 => v0.4.1 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2/credentials v0.6.1 => v0.6.2 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management v0.34.0 => v0.35.0 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2/mfa v0.18.2 => v0.18.3 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk v0.12.1 => v0.12.2 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2/verify v0.4.0 => v0.4.1 (#707)
  • bump github.com/patrickcping/pingone-go-sdk-v2 v0.11.3 => v0.11.4 (#707)

BUG FIXES:

  • resource/pingone_form: Fix error "This attribute contains duplicate values of the same type" when configuring multiple form controls of the same type. (#714)
  • resource/pingone_form: Fixed "Provider produced inconsistent result after apply" error when configuring PASSWORD or PASSWORD_VERIFY type form controls with the validation parameter set. (#715)

What's Changed

  • Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 in /tools by @dependabot in #710
  • resource/pingone_form: Fix error "This attribute contains duplicate values of the same type" by @patrickcping in #714
  • Bump github.com/cloudflare/circl from 1.3.6 to 1.3.7 by @dependabot in #711
  • Enable support for custom region parameter by @patrickcping in #706
  • Add ability to set custom user agent information by @patrickcping in #708
  • Fix "Provider produced inconsistent result after apply" error by @patrickcping in #715

Full Changelog: v0.25.0...v0.25.1

v0.25.0

02 Jan 13:08
bbe70b2
Compare
Choose a tag to compare

NOTES:

  • Add lifecycle.prevent_destroy best practice to documentation and examples for data-carrying resources, to mitigate potential accidental data loss. (#691)
  • To avoid plan inconsistency issues in earlier versions of Terraform, the provider now requires Terraform v1.3 or later. (#704)
  • data-source/pingone_application: Deprecated the saml_options.sp_verification_certificate_ids attribute. This attribute will be removed in the next major release. Use the saml_options.sp_verification.certificate_ids attribute going forward. (#680)
  • resource/pingone_application_attribute_mapping: Corrected application attribute mapping documentation example when using custom OIDC scopes. (#684)
  • resource/pingone_application: Deprecated the saml_options.sp_verification_certificate_ids parameter. This parameter will be removed in the next major release. Use the saml_options.sp_verification.certificate_ids parameter going forward. (#680)
  • bump github.com/google/uuid v1.4.0 => v1.5.0 (#701)
  • bump github.com/hashicorp/terraform-plugin-go v0.19.1 => v0.20.0 (#701)
  • bump github.com/hashicorp/terraform-plugin-mux v0.12.0 => v0.13.0 (#701)
  • bump github.com/hashicorp/terraform-plugin-sdk/v2 v2.30.0 => v2.31.0 (#701)
  • bump github.com/hashicorp/terraform-plugin-testing v1.5.1 => v1.6.0 (#689)
  • bump github.com/patrickcping/pingone-go-sdk-v2/credentials v0.6.0 => v0.6.1 (#701)
  • bump github.com/patrickcping/pingone-go-sdk-v2/management v0.33.0 => v0.34.0 (#701)
  • bump github.com/patrickcping/pingone-go-sdk-v2/mfa v0.18.1 => v0.18.2 (#701)
  • bump github.com/patrickcping/pingone-go-sdk-v2/risk v0.12.0 => v0.12.1 (#701)
  • bump github.com/patrickcping/pingone-go-sdk-v2 v0.11.2 => v0.11.3 (#701)
  • bump golang.org/x/crypto v0.16.0 => v0.17.0 (#699)

FEATURES:

  • New Resource: pingone_application_secret (#709)
  • New Resource: pingone_form (#655)
  • New Resource: pingone_forms_recaptcha_v2 (#655)

ENHANCEMENTS:

  • data-source/pingone_application: Added the saml_options.sp_verification.authn_request_signed attribute to support the "Enforce Signed AuthnRequest" option for SAML applications. (#680)
  • resource/pingone_application: Added the saml_options.sp_verification.authn_request_signed parameter to support the "Enforce Signed AuthnRequest" option for SAML applications. (#680)
  • resource/pingone_key: Added the pkcs12_file_password parameter to allow import of encrypted PKCS12 keys. (#678)
  • resource/pingone_webhook: Added the tls_client_auth_key_pair_id parameter to support outbound mTLS authentication to the endpoint used to post subscription messages to. (#679)

What's Changed

Full Changelog: v0.24.0...v0.25.0