Merge pull request #2058 from okta/prep-release

prep release 4.10.0

CHANGELOG.md

@@ -1,6 +1,27 @@
 # Changelog
 
-## 4.8.1 (June 24, 2024)
+## 4.10.0 (Aug 6, 2024)
+
+### NEW - RESOURCES, DATA SOURCES, PROPERTIES, ATTRIBUTES, ENV VARS:
+
+* Add resource  `okta_trusted_server` [#2030](https://github.com/okta/terraform-provider-okta/pull/2030). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Add support for dpop in local-sdk [#2037](https://github.com/okta/terraform-provider-okta/pull/2037). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Add support authenticationMethods in `okta_app_signon_policy_rule` [#2029](https://github.com/okta/terraform-provider-okta/pull/2029). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Add support for multiple external idps for `okta_policy_mfa` [#2044](https://github.com/okta/terraform-provider-okta/pull/2044). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Add additional examples to documentation `okta_org_metadata` [#2045](https://github.com/okta/terraform-provider-okta/pull/2045). Thanks, [@exitcode0](https://github.com/exitcode0)!
+* Add support for enhanced dynamic network zone for `okta_network_zone` [#2057](https://github.com/okta/terraform-provider-okta/pull/2057). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+
+authenticationMethods
+
+### BUG FIXES
+* Fix `okta_app_saml` cannot assign certificate [#2033](https://github.com/okta/terraform-provider-okta/pull/2033). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Reverted commit on import `okta_profile_mapping` resource due to odd behavior surrounding d.GetOK() [#2053](https://github.com/okta/terraform-provider-okta/pull/2053). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Fix `okta_user` doc [#2039](https://github.com/okta/terraform-provider-okta/pull/2039). Thanks, [@sean1588](https://github.com/sean1588)!
+* Fix the issue of attribute "custom_privacy_policy_url" must be specified when "agree_to_custom_privacy_policy" is specified [#2041](https://github.com/okta/terraform-provider-okta/pull/2041). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Fix the validator issue not allow `okta_policy_device_assurance_macos` and `okta_policy_device_assurance_windows` use with third party signal providers[#2046](https://github.com/okta/terraform-provider-okta/pull/2046). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Fix issue of not able to terraform destroy `okta_network_zone` [#2057](https://github.com/okta/terraform-provider-okta/pull/2057). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+
+## 4.9.1 (June 24, 2024)
 
 ### BUG FIXES
 * Fix panic `okta_brand` when there is no default app [#2023](https://github.com/okta/terraform-provider-okta/pull/2023). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
@@ -10,7 +31,7 @@
 
 ### NEW - RESOURCES, DATA SOURCES, PROPERTIES, ATTRIBUTES, ENV VARS:
 
-* Add add import `okta_profile_mapping` [#2004](https://github.com/okta/terraform-provider-okta/pull/2004). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
+* Add import `okta_profile_mapping` [#2004](https://github.com/okta/terraform-provider-okta/pull/2004). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
 * Add support for dpop via okta-sdk-golang [#2009](https://github.com/okta/terraform-provider-okta/pull/2009). Thanks, [@duytiennguyen-okta](https://github.com/duytiennguyen-okta)!
 
 ### BUG FIXES

docs/data-sources/network_zone.md

@@ -21,18 +21,21 @@ data "okta_network_zone" "example" {
 
 ### Optional
 
+- `dynamic_locations_exclude` (Set of String) Array of locations ISO-3166-1(2) excluded. Format code: countryCode OR countryCode-regionCode. Use with type `DYNAMIC_V2`
 - `id` (String) ID of the network zone to retrieve, conflicts with `name`.
+- `ip_service_categories_exclude` (Set of String) List of ip service excluded. Use with type `DYNAMIC_V2`
+- `ip_service_categories_include` (Set of String) List of ip service included. Use with type `DYNAMIC_V2`
 - `name` (String) Name of the network zone to retrieve, conflicts with `id`.
 
 ### Read-Only
 
-- `asns` (Set of String) Format of each array value: a string representation of an ASN numeric value
-- `dynamic_locations` (Set of String) Array of locations ISO-3166-1(2). Format code: countryCode OR countryCode-regionCode
-- `dynamic_proxy_type` (String) Type of proxy being controlled by this network zone
-- `gateways` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples
-- `proxies` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples
+- `asns` (Set of String) List of asns included. Format of each array value: a string representation of an ASN numeric value. Use with type `DYNAMIC` or `DYNAMIC_V2`
+- `dynamic_locations` (Set of String) Array of locations ISO-3166-1(2) included. Format code: countryCode OR countryCode-regionCode. Use with type `DYNAMIC` or `DYNAMIC_V2`
+- `dynamic_proxy_type` (String) Type of proxy being controlled by this dynamic network zone - can be one of `Any`, `TorAnonymizer` or `NotTorAnonymizer`. Use with type `DYNAMIC`
+- `gateways` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples. Use with type `IP`
+- `proxies` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples. Can not be set if `usage` is set to `BLOCKLIST`. Use with type `IP`
 - `status` (String) Network Status - can either be ACTIVE or INACTIVE only
-- `type` (String) Type of the Network Zone - can either be IP or DYNAMIC only
+- `type` (String) Type of the Network Zone - can be `IP`, `DYNAMIC` or `DYNAMIC_V2` only
 - `usage` (String) Zone's purpose: POLICY or BLOCKLIST
 
 

docs/data-sources/org_metadata.md

@@ -8,42 +8,7 @@ description: |-
 
 Retrieves the well-known org metadata, which includes the id, configured custom domains, authentication pipeline, and various other org settings.
 
-## Example Usage
-```terraform
-data "okta_org_metadata" "_" {}
-locals {
-  org_url = try(
-    data.okta_org_metadata._.alternate,
-    data.okta_org_metadata._.organization
-  )
-}
-
-resource "okta_resource_set" "iam_resources" {
-  label       = "iam_resources"
-  description = "iam_resources"
-  resources = [
-    "orn:okta:iam:${data.okta_org_metadata._.id}:contained_resources"
-  ]
-}
-
-resource "okta_resource_set" "support_resources" {
-  label       = "support_resources"
-  description = "support_resources"
-  resources = [
-    "orn:okta:support:${data.okta_org_metadata._.id}:cases"
-  ]
-}
-
-resource "okta_resource_set" "example" {
-  label       = "All users, groups, and apps"
-  description = "All users, groups, and apps"
-  resources = [
-    "${local.org_url}/api/v1/users",
-    "${local.org_url}/api/v1/apps",
-    "${local.org_url}/api/v1/groups"
-  ]
-}
-```
+
 
 <!-- schema generated by tfplugindocs -->
 ## Schema

docs/index.md

@@ -24,7 +24,7 @@ terraform {
   required_providers {
     okta = {
       source = "okta/okta"
-      version = "~> 4.9.1"
+      version = "~> 4.10.0"
     }
   }
 }

docs/resources/network_zone.md

@@ -34,15 +34,18 @@ resource "okta_network_zone" "example" {
 ### Required
 
 - `name` (String) Name of the Network Zone Resource
-- `type` (String) Type of the Network Zone - can either be `IP` or `DYNAMIC` only
+- `type` (String) Type of the Network Zone - can be `IP`, `DYNAMIC` or `DYNAMIC_V2` only
 
 ### Optional
 
-- `asns` (Set of String) Format of each array value: a string representation of an ASN numeric value
-- `dynamic_locations` (Set of String) Array of locations ISO-3166-1(2). Format code: countryCode OR countryCode-regionCode
-- `dynamic_proxy_type` (String) Type of proxy being controlled by this dynamic network zone - can be one of `Any`, `TorAnonymizer` or `NotTorAnonymizer`.
-- `gateways` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples
-- `proxies` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples. Can not be set if `usage` is set to `BLOCKLIST`
+- `asns` (Set of String) List of asns included. Format of each array value: a string representation of an ASN numeric value. Use with type `DYNAMIC` or `DYNAMIC_V2`
+- `dynamic_locations` (Set of String) Array of locations ISO-3166-1(2) included. Format code: countryCode OR countryCode-regionCode. Use with type `DYNAMIC` or `DYNAMIC_V2`
+- `dynamic_locations_exclude` (Set of String) Array of locations ISO-3166-1(2) excluded. Format code: countryCode OR countryCode-regionCode. Use with type `DYNAMIC_V2`
+- `dynamic_proxy_type` (String) Type of proxy being controlled by this dynamic network zone - can be one of `Any`, `TorAnonymizer` or `NotTorAnonymizer`. Use with type `DYNAMIC`
+- `gateways` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples. Use with type `IP`
+- `ip_service_categories_exclude` (Set of String) List of ip service excluded. Use with type `DYNAMIC_V2`
+- `ip_service_categories_include` (Set of String) List of ip service included. Use with type `DYNAMIC_V2`
+- `proxies` (Set of String) Array of values in CIDR/range form depending on the way it's been declared (i.e. CIDR will contain /suffix). Please check API docs for examples. Can not be set if `usage` is set to `BLOCKLIST`. Use with type `IP`
 - `status` (String) Network Status - can either be `ACTIVE` or `INACTIVE` only
 - `usage` (String) Usage of the Network Zone - can be either `POLICY` or `BLOCKLIST`. By default, it is `POLICY`
 

docs/resources/profile_mapping.md

@@ -76,10 +76,4 @@ Optional:
 
 - `push_status` (String)
 
-## Import
 
-Import is supported using the following syntax:
-
-```shell
-terraform import okta_profile_mapping.example <id>
-```

docs/resources/resource_set.md

@@ -42,25 +42,6 @@ resource "okta_resource_set" "test" {
 }
 ```
 
-```terraform
-data "okta_org_metadata" "_" {}
-locals {
-  org_url = try(
-    data.okta_org_metadata._.alternate,
-    data.okta_org_metadata._.organization
-  )
-}
-resource "okta_resource_set" "example" {
-  label       = "UsersAppsAndGroups"
-  description = "All the users, app and groups"
-  resources = [
-    "${local.org_url}/api/v1/users",
-    "${local.org_url}/api/v1/apps",
-    "${local.org_url}/api/v1/groups"
-  ]
-}
-```
-
 <!-- schema generated by tfplugindocs -->
 ## Schema
 

docs/resources/user.md

@@ -10,9 +10,8 @@ Creates an Okta User. This resource allows you to create and configure an Okta U
 
 ## Example Usage
 
-### Full profile
-
 ```terraform
+### Full profile:
 resource "okta_user" "example" {
   first_name         = "John"
   last_name          = "Smith"
@@ -46,11 +45,8 @@ resource "okta_user" "example" {
   user_type          = "Employee"
   zip_code           = "11111"
 }
-```
 
-### With Password Inline Hook
-
-```
+### With Password Inline Hook:
 resource "okta_user" "test2" {
   first_name           = "John"
   last_name            = "Smith"

okta/config.go

@@ -26,7 +26,7 @@ import (
 )
 
 const (
-	OktaTerraformProviderVersion   = "4.9.1"
+	OktaTerraformProviderVersion   = "4.10.0"
 	OktaTerraformProviderUserAgent = "okta-terraform/" + OktaTerraformProviderVersion
 )
 

templates/index.md

@@ -24,7 +24,7 @@ terraform {
   required_providers {
     okta = {
       source = "okta/okta"
-      version = "~> 4.9.1"
+      version = "~> 4.10.0"
     }
   }
 }