Surprise: 15% of resources hit! Cloudflare's Terraform v5.6.0 wipes out the bugs!

Hi, I'm Shii-chan! Today's news is a relief for anyone doing IaC with Cloudflare: the Terraform provider just jumped to v5.6.0, and a pile of bugs got fixed all at once!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to Cloudflare's Changelog, Terraform provider v5.6.0 was released on June 17, 2025. Cloudflare says that since launching the new v5 provider earlier this year, they've seen an unexpectedly high number of bug reports from customers, currently impacting about 15% of resources. This v5.6.0 release is meant to address that batch of issues.

The story so far

Unlike earlier providers, the v5 provider is automatically generated from the OpenAPI schemas behind Cloudflare's REST APIs. That should have cut down implementation effort, but it also meant a bunch of issues surfaced across resources right after launch, including:

• Recurring, unwanted diffs on every terraform plan for cloudflare_zero_trust_access_identity_provider and cloudflare_zone
• A runtime panic in cloudflare_page_rules when setting cache_level to cache_ttl_by_status
• Failure to serialize requests in cloudflare_zero_trust_tunnel_cloudflared_config
• An undocumented priority field on the zone_lockdown resource
• Missing import support for cloudflare_zero_trust_device_default_profile_local_domain_fallback and cloudflare_account_subscription

These are all resources people actually touch day to day: tunnels, zone settings, page rules.

What changes

v5.6.0 fixes all of the issues above. On GitHub, 13 issues were closed as part of this release, including reports like:

• A 500 error when updating zero_trust_tunnel_cloudflared_virtual_network (#5098)
• A panic when modifying page rule resources (#5577)
• Confusing schema between value and enabled on cloudflare_zone_setting (#5653)
• Being unable to rotate a tunnel secret (#5561)

If your CI/CD applies have been crashing with mysterious panics, or your plans keep showing noisy diffs for no reason, upgrading to v5.6.0 alone should clear a lot of it up. This one's especially relevant if you manage Zero Trust or zone settings through Terraform.

Dive Deep

Four new resources were added:

• cloudflare_schema_validation_operation_settings
• cloudflare_schema_validation_schemas
• cloudflare_schema_validation_settings
• cloudflare_zero_trust_device_settings

That's a batch of schema validation resources plus a new Zero Trust device settings resource. Beyond those, the release also lists a bunch of "other bug fixes" without going into detail, so if you want the full list, check the changelog on GitHub.

For anyone considering the move from v4 to v5, there's a migration guide with an automated migration script powered by Grit. It doesn't support setups that use Terraform modules though, so those need to be migrated by hand. Cloudflare recommends always running terraform plan to check the diff before applying.

Wrap-up

• Cloudflare released Terraform provider v5.6.0
• The switch to auto-generating v5 from OpenAPI schemas had left about 15% of resources affected by bugs
• 13 issues were closed in this release, covering zone settings, page rules, and Zero Trust tunnels
• Four new resources shipped: three for schema validation, plus cloudflare_zero_trust_device_settings
• Migrating from v4 to v5 can use Grit's automated script, except for setups using Terraform modules, which need manual migration

If you've been managing Cloudflare resources with Terraform and fighting unexplained panics or noisy diffs, this is exactly the update you've been waiting for!