CHANGELOG.md

Changelog

3.0.7 (November, 17 2024)

Notes

• Release date: (November, 17 2024)
• Supported Terraform version: v1.x

Internal Fixes

• PR #374 - Added new file_types supported values in the zia_dlp_web_rules resource. See the zia_dlp_web_rules documentation.

3.0.6 (October, 8 2024)

Notes

• Release date: (October, 8 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #374 - Added missing attribute sourceCountries to ZIA firewallfilteringrule

3.0.5 (October, 4 2024)

Notes

• Release date: (October, 4 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #373 - The resource zia_forwarding_control_rule now pauses for 60 seconds before proceeding with the create or update process whenever the forward_method attribute is set to ZPA. In case of a failure related to resource synchronization, the provider will retry the resource creation or update up to 3 times, waiting 30 seconds between each retry. This behavior ensures that ZIA and ZPA have sufficient time to synchronize and replicate the necessary resource IDs, reducing the risk of transient errors during provisioning. NOTE This retry mechanism helps to automatically overcome temporary latency without manual intervention. This behavior does not affect forwarding rules configured with other forward_methods such as DIRECT.

3.0.4 (September, 6 2024)

Notes

• Release date: (September, 6 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #369 - Fixed zia_dlp_web_rules validation function for the attribute file_types.

3.0.3 (August, 26 2024)

Notes

• Release date: (August, 26 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #368 - Implemented runtime validation for the attribute dest_addresses in the resource: zia_firewall_filtering_rule. The provider now validates if the IP address provided is an IPv4.

3.0.2 (August, 19 2024)

Notes

• Release date: (August, 19 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #366 - Implemented runtime validation for resource: zia_forwarding_control_rule. The provider now validates incompatible attributes during the plan and apply stages at the schema level.

• PR #366 - Fixed the datasource zia_traffic_forwarding_gre_vip_recommended_list to allow Geo location information override when needed. The datasource now supports the following optional attributes:

  • routable_ip - (Boolean) The routable IP address.
  • within_country_only - (Boolean) Search within country only.
  • include_private_service_edge - (Boolean) Include ZIA Private Service Edge VIPs.
  • include_current_vips - (Boolean) Include currently assigned VIPs.
  • latitude - (Number) The latitude coordinate of the GRE tunnel source.
  • longitude - (Number) The longitude coordinate of the GRE tunnel source.
  • subcloud - (String) The longitude coordinate of the GRE tunnel source.

• PR #366 - Added centralized semaphore functionality to manipulate concurrent request limitations.

3.0.1 (August, 13 2024)

Notes

• Release date: (August, 13 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #365 - Fixed ports attribute in zia_location_management resource to support TypeSet with elements of TypeInt.

Documentation

• PR #365 - Updated documentation for resources: zia_location_management and zia_cloud_app_control_rule

3.0.0 (August, 12 2024)

Notes

• Release date: (August, 12 2024)
• Supported Terraform version: v1.x

Enhancements

• PR #361 - Added new resource and datasource zia_cloud_app_control_rule for Cloud Application Control rule management.
• PR #361 - Added new datasource zia_dlp_dictionary_predefined_identifiers to retrieve DLP Dictionary Hierarchical Identifiers. The information can be used when configuring DLP Dictionary resource attribute hierarchical_identifiers to clone predefined dictionaries.
• PR #361 - Added new attribute hierarchical_identifiers to zia_dlp_dictionaries resource.
• PR #361 - Enhanced zia_security_settings to support maximum number of blacklist urls.

Bug Fixes

• PR #361 - Added Semaphore retry logic to resource zia_url_categories to assist with rate limiting management.
• PR #361 - Fixed ports attribute in zia_location_management resource to support TypeList.

2.91.4 (July, 3 2024)

Notes

• Release date: (July, 3 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #357 - Fixed zia_url_filtering_rules drift due to attribute conversion validatidy_start_time and validity_end_time.

2.91.3 (July, 2 2024)

Notes

• Release date: (July, 2 2024)
• Supported Terraform version: v1.x

Bug Fix

• PR #356 - Fixed zia_url_filtering_rules schema validation to ensure proper validation during plan and apply stages.
• PR #356 - Fixed zia_location_management drift due to missing state attribute in the READ function.

2.91.2 (July, 2 2024)

Notes

• Release date: (July, 2 2024)
• Supported Terraform version: v1.x

Bug Fix

• PR #356 - Fixed zia_url_filtering_rules schema validation to ensure proper validation during plan and apply stages.

2.91.1 (June, 29 2024)

Notes

• Release date: (June, 29 2024)
• Supported Terraform version: v1.x

Bug Fix

• PR #354 - Fixed go.mod and go.sum
• PR #354 - Fixed computed attributes in the schema

2.91.0 (June, 19 2024)

Notes

• Release date: (June, 19 2024)
• Supported Terraform version: v1.x

BREAKING CHANGES and ENHACEMENTS

• PR #350

  • zia_url_filtering_rules - The provider now explicitly validates during the plan and apply stages which attributes can be set based on the action value.

  • zia_url_filtering_rules - The provider now allows for the use of RFC1123 date and time format i.e Sun, 16 Jun 2024 15:04:05 UTC when setting the attributes validity_start_time and validity_end_time instead of the native epoch unix format.

    ~> NOTE This change is not backwards compatible.

  • zia_url_filtering_rules - The provider now explicitly validates the attribute validity_time_zone_id against the official IANA List. The supported format is: "US/Pacific"

    ~> NOTE This change is not backwards compatible.

  • ziaActivator - The Out-of-band ZIA Activator has been updated to directly leverage the Zscaler-SDK-GO. ~> NOTE If you plan to update your provider installation to the latest v2.91.0, you must re-compile the utility program. ~> NOTE Note that as of release v2.8.2 the provider offers the option to trigger activation by setting the ZIA_ACTIVATION environment variable. With this enhancement the activation occurs only when this environment variable is set to true.

Internal Changes

• PR #350 - Upgraded to Zscaler-SDK-GO. The upgrade supports easier ZIA API Client instantiation for existing and new resources.
• PR #350 Upgraded releaser.yml to GoReleaser v6

2.9.0 (May, 22 2024) - BREAKING CHANGE

Notes

• Release date: (May, 22 2024)
• Supported Terraform version: v1.x

Bug Fixes - BREAKING CHANGE

• PR #345 - The attribute ocr_enabled has been deprecated at the upstream API and is no longer accepted. The OCR feature must be enabled via the DLP Advanced Settings. NOTE DLP engines support OCR scanning of PNG, JPEG, TIFF, and BMP files.

• PR #345 - Implemented Fix for zia_dlp_web_rules for new attributes parent_rule and sub_rules. A parent rule must be configured with rank 0 and prior to any potential subrule. It is not possible to add existing rules as as subrules under the parent rule.

2.8.31 (May, 21 2024)

Notes

• Release date: (May, 21 2024)
• Supported Terraform version: v1.x

Bug Fixes

• PR #344 - Fixed id conversion for the resource zia_traffic_forwarding_vpn_credentials to ensure proper state file setting.

• PR #344 - Upgraded to Zscaler-SDK-GO v2.5.2

2.8.3 (May, 7 2024)

Notes

• Release date: (May, 7 2024)
• Supported Terraform version: v1.x

Enhancements

• PR #340 - Added new ZIA URL Filtering Rule attribute source_ip_groups to resources: zia_url_filtering_rules and zia_dlp_web_rules
• PR #340 - Upgraded to Zscaler-GO-SDK v2.5.0

2.8.21 (April, 8 2024)

Notes

• Release date: (April, 8 2024)
• Supported Terraform version: v1.x

Enhancements

• PR #336 - Upgraded provider to Zscaler-SDK-GO v2.4.35

2.8.2 (April, 8 2024)

Notes

• Release date: (April, 8 2024)
• Supported Terraform version: v1.x

2.8.2 (April, 8 2024)

Notes

• Release date: (April, 8 2024)
• Supported Terraform version: v1.x

Enhancements

• PR #332 - Implemented optional environment variable ZIA_ACTIVATION for optional configuration activation. This is an improved version of the initial release v2.8.0 where activations were done implicitly for every resource. With this enhancement the activation will only occur when this environment variable is set to true.

2.8.1 (March, 27 2024)

Notes

• Release date: (March, 27 2024)
• Supported Terraform version: v1.x

Documentation

• Redacted several password creation examples to prevent GitGuardian false positives. A header comment has also been added to advise.

2.8.0 (March, 27 2024)

Notes

• Release date: (March, 27 2024)
• Supported Terraform version: v1.x

Enhancements

• PR #330 - Implemented auto activation functionality to all supported resources. Configurations will now be activated during CREATE, UPDATE AND DELETE actions when executing terraform apply or terraform destroy, which removes the need of out of band activation or the use of the resource: zia_activation_status.

Fixes

• PR #330 - Fixed zia_user_management resource to support activation pre and post user enrolment using BASIC authentication method.

2.7.33 (March, 6 2024)

Notes

• Release date: (March, 6 2024)
• Supported Terraform version: v1.x

Enhacements

• PR #325 Updated support guide with new Zscaler support model.
• PR #325 - Added support to import of the following resources:
• zia_auth_settings_urls
• zia_sandbox_behavioral_analysis
• zia_security_settings

2.7.32 (February, 28 2024)

Notes

• Release date: (February, 28 2024)
• Supported Terraform version: v1.x

Fixes

• PR #322 - Fixed validation zia_url_filtering_rules resource to validate protocols attribute to accept HTTP_RULE and HTTPS_RULE.
• PR #322 - Fixed validation zia_url_filtering_rules validations for rules with action configured as ISOLATE.
• PR #322 - Fixed linter issues across several acceptance tests resources and data sources.

2.7.31 (February, 28 2024)

Notes

• Release date: (February, 28 2024)
• Supported Terraform version: v1.x

Fixes

• PR #321 - Fixed validation function in the resource zia_url_filtering_rules for the attribute protocols. The provider now validates the following API supported values: SMRULEF_ZPA_BROKERS_RULE, ANY_RULE, TCP_RULE, UDP_RULE, DOHTTPS_RULE, TUNNELSSL_RULE, HTTP_PROXY, FOHTTP_RULE, FTP_RULE, HTTPS_RULE, HTTP_RULE, SSL_RULE, TUNNEL_RULE, WEBSOCKETSSL_RULE, WEBSOCKET_RULE,

2.7.3 (February 14, 2024)

Notes

• Golang: v1.19

Enhacements

• PR #319 - Implemented validation to the following resources:
  • zia_firewall_filtering_destination_groups
  • zia_firewall_filtering_rule
  • zia_forwarding_control_zpa_gateway
  • zia_forwarding_control_policy

2.7.2 (January 31, 2024)

Notes

• Golang: v1.19

Enhacements

• PR #315 - Added support to new workload_groups attributes to the following resources:
  • zia_firewall_filtering_rule
  • zia_url_filtering_rules
  • zia_dlp_web_rules

Fixes

• PR #315 - Fixed panic within the resource zia_location_management when setting the attribute ip_addresses in a sub-location. The provider now supports and validates the following ip_addresses formats:

  • 10.0.0.0-10.0.0.255
  • 10.0.0.1

  ~> NOTE CIDR notation is currently not supported due to API response incosistencies that may introduce drifts in the Terraform execution. This issue will be addressed in the future.

2.7.1 (January 26, 2024)

Notes

• Golang: v1.19

Enhacements

• PR #313 - Added support for ZIA Workload Groups Tagging

2.7.0 (January, 15 2023)

Notes

• Release date: (January, 15 2023)
• Supported Terraform version: v1.x

Enhancements

NEW - RESOURCES, DATA SOURCES

• PR #293 - ✨ Added support for ZIA 🆕 Custom ZPA Gateway for use with Forwarding Control policy to forward traffic to ZPA for Source IP Anchoring.

• PR #294 - ✨ Added support for ZIA 🆕 Forwarding Control Rule configuration.

• PR #295 - ✨ Added ZIA Sandbox MD5 Hash and verdict report submission Resources:

  • Sandbox Advanced Settings - zia_sandbox_behavioral_analysis Gets and Upddates the custom list of MD5 file hashes that are blocked by Sandbox.
  • Sandbox Report - zia_sandbox_report Gets a full (i.e., complete) or summary detail report for an MD5 hash of a file that was analyzed by Sandbox.

• PR #295 - ✨ Added ZIA Sandbox raw and archive file submission:

  • Sandbox Submission - zia_sandbox_file_submission - Submits raw or archive files (e.g., ZIP) to Sandbox for analysis. You can submit up to 100 files per day and it supports all file types that are currently supported by Sandbox.
  • Sandbox Submission - zia_sandbox_file_submission - Submits raw or archive files (e.g., ZIP) to the Zscaler service for out-of-band file inspection to generate real-time verdicts for known and unknown files. It leverages capabilities such as Malware Prevention, Advanced Threat Prevention, Sandbox cloud effect, AI/ML-driven file analysis, and integrated third-party threat intelligence feeds to inspect files and classify them as benign or malicious instantaneously. ⚠️ Note:: The ZIA Terraform provider requires both the ZIA_CLOUD and ZIA_SANDBOX_TOKEN in order to authenticate to the Zscaler Cloud Sandbox environment. For details on how obtain the API Token visit the Zscaler help portal About Sandbox API Token

• PR #302 - Added new zia_dlp_web_rules attributes:

  • severity - Supported values: RULE_SEVERITY_HIGH, RULE_SEVERITY_MEDIUM, RULE_SEVERITY_LOW, RULE_SEVERITY_INFO
  • user_risk_score_levels - Supported values: LOW, MEDIUM, HIGH, CRITICAL
  • parent_rule
  • sub_rules

• PR #308 - ✨ Added 🆕 Cloud Browser Isolation Profile data source. The data source can be used to associate a CBI profile with the zia_url_filtering_rules resource when the action is set to ISOLATE

• PR #309 - ✨ Added 🆕 support to the following attributes within the zia_firewall_filtering_rule:

  • device_trust_levels - Supported values: UNKNOWN_DEVICETRUSTLEVEL, LOW_TRUST, MEDIUM_TRUST, HIGH_TRUST
  • user_risk_score_levels - Supported values: LOW, MEDIUM, HIGH, CRITICAL
  • devices
  • device_groups

• PR #309 - ✨ Added new attribute zpa_app_segments to zia_firewall_filtering_rule to support ZPA Application Segments. Only ZPA application segments that have the Source IP Anchor option enabled are supported.

Fixes

• PR #299 - Fixed panic with zia_url_categories.
• PR #302 - Fixed zia_dlp_web_rules File Types validation function.

2.6.6 (November, 23 2023)

Notes

• Release date: (November, 23 2023)
• Supported Terraform version: v1.x

Fixes

• PR #291 - Fixed panic with resource zia_admin_users due to API changes.

2.6.5 (November, 5 2023)

Notes

• Release date: (November, 5 2023)
• Supported Terraform version: v1.x

Fixes

• PR #285 - Fixed drift within zia_firewall_filtering_rule for the attribute dest_countries.

2.6.4 (October, 25 2023)

Notes

• Release date: (October, 25 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #285 - Introduced new zia_location_management attributes: other_sublocation, other6_sublocation, ipv6_enabled, ipv6_dns_64prefix

Fixes

• PR #285 - Fixed zia_location_management resource attribute ip_addresses to TypeSet to prevent drifts in case the API returns IP addresses in an ordered fashion.

2.6.3 (October, 18 2023)

Notes

• Release date: (October, 18 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #278 - Provider HTTP Header now includes enhanced User-Agent information for troubleshooting assistance.
  • i.e User-Agent: (darwin arm64) Terraform/1.5.5 Version/2.6.3
• PR #283 - Upgrade to Zscaler-SDK-GO v2.1.4

2.6.2 (September, 20 2023)

Notes

• Release date: (September, 20 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #276 - Added Country code validation for attribute dest_countries in the resource zia_firewall_filtering_rule. The provider validates the use of proper 2 letter country codes ISO3166 By Alpha2Code

• PR #276 - Added Country name validation for attribute country in the resource zia_location_management. The provider validates the use uppercase country codes using ISO-3166-1

2.6.1 (August, 29 2023)

Notes

• Release date: (August, 29 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #258 Improved geographical coordinates for attributes latitude and longitude in the resource zia_traffic_forwarding_static_ip to ensures that the state always mirrors the backend system's values.

Fixes

• PR #259 Fixed drift problem within the resource zia_firewall_filtering_network_service_groups.

• PR #266 Fixed drift problem within the resource zia_url_filtering_rules order attribute

• PR #260 Updated zia_firewall_filtering_network_service resource documentation. !> NOTE: Resources of type PREDEFINED are built-in resources within the ZIA cloud and must be imported before the Terraform execution. Attempting to update the resource directly will return DUPLICATE_ITEM error message. To import a predefined built-in resource use the following command for example: terraform import zia_firewall_filtering_network_service.this "DHCP"

2.6.0 (August, 1 2023)

Notes

• Release date: (August, 1 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #257 Added New Public ZIA DLP Engine Endpoints (POST/PUT/DELETE) ⚠️ WARNING: "Before using the new zia_dlp_engines resource contact Zscaler Support." and request the following API methods POST, PUT, and DELETE to be enabled for your organization.

Fixes

• PR #251 Added new predefied URL Category AI_ML_APPS to resource resource_zia_url_categories.
• PR #253 Fixed documentation for resource zia_firewall_filtering_destination_groups

2.5.6 (June, 10 2023)

Notes

• Release date: (June, 10 2023)
• Supported Terraform version: v1.x

Fixes

• Updated to Zscaler-SDK-GO v1.5.5. The update improves search mechanisms for both ZIA and ZPA resources, to ensure streamline upstream GET API requests and responses using search parameter. Notice that not all current API endpoints support the search parameter, in which case, all resources will be returned.

2.5.5 (May, 29 2023)

Notes

• Release date: (May, 29 2023)
• Supported Terraform version: v1.x

Fixes

• PR #244 Fix zia_user_management to ensure when the auth_methodsattribute is set, and user password is changed, the provide will re-enroll the user to update the password.

2.5.4 (May, 25 2023)

Notes

• Release date: (May, 25 2023)
• Supported Terraform version: v1.x

Fixes

• PR #234 Fix expand functions to ensure correct API response processing across all resource rule creation.

2.5.3 (May, 13 2023)

Notes

• Release date: (May, 13 2023)
• Supported Terraform version: v1.x

Fixes

• PR #231 zia_dlp_web_rules: Fixed panic with zia_web_dlp_rules due to dlp_engines attribute expand function

2.5.2 (May, 1 2023)

Notes

• Release date: (May, 1 2023)
• Supported Terraform version: v1.x

Ehancements

• PR #224 zia_dlp_web_rule: Reduced TimeTicker for faster rule order processing during creation and modifications.
• PR #224 zia_dlp_web_rule: Updated DLP Web Rule documentation with more examples
• PR #226 Expanded ZIA search criteria to include auditor users.
• PR #227 Introduced new attribute parent_name to the resource zia_location_management. The attribute will allow the ability to search for sublocation resources across multiple parent locations specially when overlapping names are in use. Issue #223

Fixes

• PR #219 zia_dlp_web_rules: Fixed drift issues with attributes url_categories and dlp_engines
• PR #221 zia_dlp_dictionary: Fix DLP dictionary resource when phrase attribute is not provided
• PR #228 zia_dlp_dictionary: Fixed idm_profile_match_accuracy attribute to prevent drifts, plus accept zia_dlp_idm_profile_lite template_id when selecting dictionary_type INDEXED_DATA_MATCH

2.5.1 (April, 12 2023)

Notes

• Release date: (April, 12 2023)
• Supported Terraform version: v1.x

Ehancements

• PR #213 zia_location_management: Added to support to sub-location search within data source. Issue #209

Fixes

• PR #217 zia_dlp_engines: Fixed DLP Engine data source to allow search for predefined engines. Issue #216
• PR #219 zia_dlp_web_rules: DLP Web rule configuration drift for certain attributes when not set in order.

2.5.0 (March, 27 2023)

Notes

• Release date: (March, 27 2023)
• Supported Terraform version: v1.x

Ehancements

• PR #202 zia_user_management: Implemented new attribute auth_methods. The attribute supports the following values: BASIC and/or DIGEST.

• zia_location_management: Implemented new attribute basic_auth_enabled. The supported values are: true or false

• PR #202 The provider now supports authentication to Zscaler preview and zscalerten clouds.

• PR #211 Added new datasource zia_location_lite. This data source can be used to return the "Road Warrior" location, which can then be used in the following resources: zia_url_filtering_rules, zia_firewall_filtering_rule and zia_dlp_web_rules

• PR #213 Added support to search for sub-location within the resource zia_location_management

Fixes

• PR #212 zia_user_management: Fixed flattening function to expand group attribute values. Issue #205

• PR #214 zia_traffic_forwarding_gre_tunnel: Fixed issue while creating GRE Tunnels. Issue #208

2.4.6 (March, 6 2023)

Notes

• Release date: (March, 6 2023)
• Supported Terraform version: v1.x

Fixes

• zia_location_management: Fixed IPv4 Address and IPv4Address range validation.
• zia_traffic_forwarding_static_ip: Fixed Longitude and Latitude computed attributes.
• zia_url_categories: Removed Default: false attribute to prevent drifts.

2.4.5 (March, 2 2023)

Notes

• Release date: (March, 2 2023)
• Supported Terraform version: v1.x

Fixes

• PR #199 Improved Timeout reorder functions to ensure the rules across the below resources are organized correctly.

  • ``zia_firewall_filtering_rule`

• PR #200 Improved Timeout reorder functions to ensure the rules across the below resources are organized correctly.

  • ``zia_dlp_web_rules`
  • ``zia_url_filtering_rules`

2.4.4 (March, 1 2023)

Notes

• Release date: (March, 1 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #193 Added new following new datasources:

  • zia_firewall_filtering_application_services The returned values are:

    • SKYPEFORBUSINESS, FILE_SHAREPT_ONEDRIVE, EXCHANGEONLINE, M365COMMON, ZOOMMEETING, WEBEXMEETING, WEBEXTEAMS, WEBEXCALLING, RINGCENTRALMEETING, GOTOMEETING, GOTOMEETING_INROOM, LOGMEINMEETING, LOGMEINRESCUE

  • zia_firewall_filtering_application_services_group The returned values are:

    • OFFICE365, ZOOM, WEBEX, RINGCENTRAL, LOGMEIN

Fixes

• PR #194 Improved Timeout reorder functions to ensure the rules across the below resources are organized correctly.
  • zia_dlp_web_rules
  • zia_url_filtering_rules
  • ``zia_firewall_filtering_rule`

⚠️ WARNING: Due to API limitations, we recommend to limit the number of requests to ONE, when configuring the above resources.

This will allow the API to settle these resources in the correct order. Pushing large batches of security rules at once, may incur in Terraform to Timeout after 20 mins, as it will try to place the rules in the incorrect order. This issue will be addressed in future versions.

In order to accomplish this, make sure you set the parallelism value at or below this limit to prevent performance impacts.

• PR #195 Fixed zia_traffic_forwarding_gre_tunnel by removing unecessary computed values to prevent drifts.

2.4.3 (February, 28 2023)

Notes

• Release date: (February, 28 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #193 Added new following new datasources:

  • zia_firewall_filtering_application_services The returned values are:

    • SKYPEFORBUSINESS, FILE_SHAREPT_ONEDRIVE, EXCHANGEONLINE, M365COMMON, ZOOMMEETING, WEBEXMEETING, WEBEXTEAMS, WEBEXCALLING, RINGCENTRALMEETING, GOTOMEETING, GOTOMEETING_INROOM, LOGMEINMEETING, LOGMEINRESCUE

  • zia_firewall_filtering_application_services_group The returned values are:

    • OFFICE365, ZOOM, WEBEX, RINGCENTRAL, LOGMEIN

Fixes

• PR #194 Improved Timeout reorder functions to ensure the rules across the below resources are organized correctly.
  • zia_dlp_web_rules
  • zia_url_filtering_rules
  • ``zia_firewall_filtering_rule`

⚠️ WARNING: Due to API limitations, we recommend to limit the number of requests to ONE, when configuring the above resources.

This will allow the API to settle these resources in the correct order. Pushing large batches of security rules at once, may incur in Terraform to Timeout after 20 mins, as it will try to place the rules in the incorrect order. This issue will be addressed in future versions.

In order to accomplish this, make sure you set the parallelism value at or below this limit to prevent performance impacts.

• PR #195 Fixed zia_traffic_forwarding_gre_tunnel by removing unecessary computed values to prevent drifts.

2.4.2 (February, 13 2023)

Notes

• Release date: (February, 13 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #180 Implemented customizable Timeouts for Create and Update functions to help with rule reorder across the following resources:

  • zia_dlp_web_rules
  • zia_url_filtering_rules
  • zia_firewall_filtering_rule

• PR #182 Implemented validation for ocr_enabled attribute validation for zia_dlp_web_rules

2.4.1 (February, 10 2023)

Notes

• Release date: (February, 10 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #181 Implemented customizable Timeouts for Create and Update functions to help with rule reorder across the following resources:
  • zia_dlp_web_rules
  • zia_url_filtering_rules
  • zia_firewall_filtering_rule

2.4.0 (January, 31 2023)

Notes

• Release date: (January, 31 2023)
• Supported Terraform version: v1.x

Enhancements

• PR #176 Added the following ZIA data sources
  • zia_dlp_icap_servers - Gets a the list of DLP servers using ICAP
  • zia_dlp_incident_receiver_servers - Gets a list of DLP Incident Receivers
  • zia_dlp_idm_profiles - Indexed Document Match (IDM) template (or profile) information.

2.3.6 (January, 25 2023)

Notes

• Release date: (January, 25 2023)
• Supported Terraform version: v1.x

Fixes

• PR #171 - Update to Zscaler-Go-SDK to fix bool parameter enable_full_logging in the ZIA Firewall Filtering resource.
• PR #174 - Fix zia_web_rules file_types attribute to accept empty values. Also, added new supported file types to the validation fuction.

2.3.5 (January, 12 2023)

Notes

• Release date: (January, 12 2023)
• Supported Terraform version: v1.x

Fixes

• PR #160 - Fixed Pagination Issues across all resources

2.3.4 (January, 4 2023)

Notes

• Release date: (January, 4 2023)
• Supported Terraform version: v1.x

Fixes

• PR #168 zia_firewall_filtering_rule Added the following new network applications to validation function

  • VMWARE_HORIZON_VIEW,ADOBE_CREATIVE_CLOUD, ZOOMINFO, SERVICE_NOW, MS_SSAS, GOOGLE_DNS, CLOUDFLARE_DNS, ADGUARD, QUAD9, OPENDNS, CLEANBROWSING, COMCAST_DNS, NEXTDNS, POWERDNS,BLAHDNS,SECUREDNS,RUBYFISH,DOH_UNKNOWN,GOOGLE_KEEP,AMAZON_CHIME,WORKDAY,FIFA,ROBLOX,WANGWANG,S7COMM_PLUS,DOH,AGORA_IO,MS_DFSR,WS_DISCOVERY,STUN,FOLDINGATHOME,GE_PROCIFY,MOXA_ASPP,APP_CH,GLASSDOOR,TINDER,BAIDU_TIEBA,MIMEDIA,FILESANYWHERE,HOUSEPARTY,GBRIDGE,HAMACHI,HEXATECH,HOTSPOT_SHIELD,MEGAPROXY,OPERA_VPN,SPOTFLUX,TUNNELBEAR,ZENMATE, OPENGW, VPNOVERDNS, HOXX_VPN, VPN1_COM, SPRINGTECH_VPN, BARRACUDA_VPN, HIDEMAN_VPN, WINDSCRIBE, BROWSEC_VPN, EPIC_BROWSER_VPN, SKYVPN, KPN_TUNNEL, ERSPAN,EVASIVE_PROTOCOL, DOTDASH, ADOBE_DOCUMENT_CLOUD, FLIPKART_BOOKS

• PR #165 zia_url_filtering_rules Added new URL Categories

2.3.3 (January, 1 2023)

Notes

• Release date: (January, 1 2023)
• Supported Terraform version: v1.x

Fixes

• PR #167 Published provider as v2 go-module

2.3.2 (December, 30 2022)

Notes

• Release date: (December, 30 2022)
• Supported Terraform version: v1.x

Fixes

• PR #164 Added missing URL Category resource parameters
• PR #165 Added missing URL Category to zia_url_filtering_rule

2.3.1 (December, 3 2022)

Notes

• Release date: (December, 3 2022)
• Supported Terraform version: v1.x

Fixes

• PR #150 Fixed DLP Web rule resource panic due to incorrect assignment
• PR #150 Fixed DLP Notification Template resource panic due to incorrect assignment
• PR #151 Fixed DLP Dictionary panic due to incorrect assignment

2.3.0 (November, 25 2022)

Notes

• Release date: (November, 25 2022)
• Supported Terraform version: v1.x

Fixes

• PR #147 Fixed Read/Update/Delete functions to allow automatic recreation of resources, that have been manually deleted via the UI.
• PR #147 Removed deprecated helper from zia_location_management resource.

2.2.3 (October, 20 2022)

Notes

• Release date: (October, 20 2022)
• Supported Terraform version: v1.x

Enhancements

• PR #137 Added Customizable Timeouts to zia_activation_status resource.
• PR #138 Added acceptance test to zia_activation_status data source.

Fixes

• PR #134 Update to zscaler-sdk-go v0.1.1
• PR #135 Update to zscaler-sdk-go v0.1.2
• PR #135 Added missing parameter comment to zia_traffic_forwarding_static_ips
• PR #136 Updated Documentation for zia_activation_status resource and data source.

2.2.2 (September, 25 2022)

Notes

• Release date: (September, 25 2022)
• Supported Terraform version: v1.x

Fixes

• PR #130 Fix Import Resource By ID

2.2.1 (September, 21 2022)

Notes

• Release date: (September, 21 2022)
• Supported Terraform version: v1.x

Fixes

• PR #127 Updated provider to zscaler-go-sdk v0.0.10
• PR #127 zia_user_management group attribute to hold a list of group IDs as a typeList instead of typeSet.

2.2.0 (August, 19 2022)

Notes

• Release date: (August 19 2022)
• Supported Terraform version: v1.x

Ehancements

• PR #113 Integrated newly created Zscaler GO SDK. Models are now centralized in the repository zscaler-sdk-go

Fixes

• Terraform import failing for zia_traffic_forwarding_static_ip resource. Search by IP criteria was not implemented.

2.1.2 (June, 19 2022)

Notes

• Release date: (July 19 2022)
• Supported Terraform version: v1.x

Ehancements

• PR #110 Added Terraform UserAgent for Backend API tracking

Fixes

• PR #111 Updated Import GPG key in goreleaser to paultyng/ghaction-import-gpg
• PR #111 Updated golangci-lint to use golang 18

2.1.1 (June, 7 2022)

Notes

• Supported Terraform version: v1.x

• Fix: Fixed provider file to include resource and datasource hooks.

New Features

• zia_auth_settings_urls Added new resource to support adding and removing URLs to ZIA exemption list.
• zia_security_policy_settings Added new resource to support adding and removing whitelisted and blacklisted URLs to the Advanced Threat Protection feature in ZIA.

2.1.0 (June, 7 2022)

Notes

• Supported Terraform version: v1.x

New Features

• zia_auth_settings_urls Added new resource to support adding and removing URLs to ZIA exemption list.
• zia_security_policy_settings Added new resource to support adding and removing whitelisted and blacklisted URLs to the Advanced Threat Protection feature in ZIA.

2.0.3 (May, 18 2022)

Notes

• Supported Terraform version: v1.x

Announcement

The Terraform Provider for Zscaler Internet Access (ZIA) is now officially hosted under Zscaler's GitHub account and published in the Terraform Registry. For more details, visit the Zscaler Community Article Here Administrators who used previous versions of the provider, and followed instructions to install the binary as a custom provider, must update their provider block as such:

terraform {
  required_providers {
    zia = {
      source = "zscaler/zia"
      version = "2.0.3"
    }
  }
}
provider "zia" {}

New Data Sources

• zia_dlp_engines - PR#91 🔧

2.0.1 (April 17, 2022)

Bug Fixes

Several schema type, expand and flattening function fixes were implemented to prevent undesired plan refresh updates and further provider optimization.

• zia_dlp_dictionaries - PR#61 🔧
• zia_dlp_web_rules - PR#62 🔧
• zia_firewall_filtering_rule - Added schema validation order parameter to ensure value is at least 1. PR#63 🔧
• zia_url_filtering_rules - PR#66 🔧
• zia_admin_users - PR#67 🔧
• zia_user_management - PR#67 🔧

Enhancements

1. Updated ZIA API client to validate the corresponding Zscaler cloud name. The previous environment variable ZIA_BASE_URL was replaced with ZIA_CLOUD. PR#58

2. The provider now validates the proper Zscaler cloud name. PR#58 For instructions on how to find your Zscaler cloud name, refer to the following help article Here

3. Added and fixed multiple acceptance tests to easily and routinely verify that Terraform Plugins produce the expected outcome

4. Updated GitHub Actions CI to include both build and acceptance test workflow

5. Added new optimized acceptance tests - PR#71 🔧

2.0.0 (February 9, 2022)

New Resources and DataSources

The ZIA cloud service API now includes new endpoints in order to fully support Data Loss Prevention (DLP) rule creation and updates. The following Terraform resources and data source have been added:

DATA SOURCES:

• data_source_zia_device_group PR#50 🚀
• data_source_zia_dlp_notification_templates.PR#53 🚀
• data_source_zia_dlp_web_rules.PR#53 🚀
• data_source_zia_dlp_engines.PR#53 🚀

RESOURCES:

• resource_zia_dlp_notification_templates.PR#53🚀
• resource_zia_dlp_web_rules.PR#53 🚀
• resource_zia_dlp_engines.PR#53 🚀

UPDATES:

• Added zia_device_groups to resource_zia_url_filtering_rules.PR#51 🚀

New Acceptance Tests

• Added multiple acceptance tests to easily and routinely verify that Terraform Plugins produce the expected outcome. PR#54
• Added GoRelease workflow to GitHub Actions CI/CD for automatic software release.

1.0.3 (December 28, 2021)

Bug Fixes

• Fixed issue where Terraform showed that resources had been modified even though nothing had been changed in the upstream resources. PR#45 🔧

Enhacements

• Added multiple validators across several resources for better API abstraction and mistake prevention during terraform apply PR#46 🚀

• The provider now supports the ability to import resources via its name and/or id property to support easier migration of existing ZIA resources via terraform import command. The following resources are supported:

  • resource_zia_admin_users - PR#47] 🚀
  • resource_zia_dlp_dictionaries - PR#47 🚀
  • resource_zia_firewall_filtering_rules - PR#47 🚀
  • resource_zia_fw_filtering_ip_destination_groups - PR#47 🚀
  • resource_zia_fw_filtering_ip_source_groups - PR#47 🚀
  • resource_zia_fw_filtering_network_application_groups - PR#47 🚀
  • resource_zia_fw_filtering_network_services_groups - PR#47 🚀
  • resource_zia_fw_filtering_network_services - PR#47 🚀
  • resource_zia_location_management - PR#47 🚀
  • resource_zia_url_categories - PR#47 🚀
  • resource_zia_url_filtering_rules - PR#47 🚀
  • resource_zia_user_management_users - PR#47 🚀

1.0.2 (November 29, 2021)

Bug Fixes

• VPN Credentials: Fixed issue where when creating a VPN credential and type was set to IP, the field ip_address was being returned as a non-expected argument. The issue was addressed on PR#36

• VPN Credentials: Fixed issue where when creating VPN credential and type was set to UFQDN, the parameter was not being validated if it was empty. The issue was addressed on PR#36

• VPN Credentials: Removed unsupported VPN Credential types CN and XAUTH. The issue was addressed on PR#36

• Location Management: Fixed issue where when creating a sub-location and the ip_addresses field was empty or the value was not a valid IPv4 address r IPv4 range, the provider pushed partial configuration and then exited with failure. The new validation function, will check if the parent_id has been set to a value greater than 0 and if the ip_addresses parameter has been fullfilled. The issue was addressed on PR#37

Enhacements

• Static IP: Added ForceNew option to ip_address in the schema, so the resource will be destroyed and recreated PR#40

• VPN Credentials: Added ForceNew option to type in the schema, so the resource will be destroyed and recreated if the type of the VPN resource needs to be changed from IP to UFQDN and vice-versa PR#41