Terraform v5.8.4 stabilizes 19 resources at once — and test-driven bug squashing kicks in!

Hi, it's me! Cloudflare's Terraform provider got another update, so let's dig in for all the IaC folks out there!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to the Cloudflare Changelog, Terraform provider v5.8.4 was released on August 15, 2025. The v5 provider, launched earlier this year, has received a lot of issue reports from the community, and Cloudflare has kept up a two-week release cadence to address them.

The headline this time isn't just bug fixes — Cloudflare also revealed a recent pivot toward more comprehensive, test-driven development. They're still evaluating individual issues, but they're also investing in much deeper testing, with plans to invest in comprehensive migration scripts going forward. As a result, several of the highest-traffic APIs have been stabilized in this release and are now backed by comprehensive acceptance tests.

The story so far

Since the v5 provider is auto-generated from OpenAPI schemas, a lot of issues surfaced across resources after launch. Cloudflare had been working through a two-week improvement cycle, but fixing issues one at a time made it hard to say with confidence that any given resource was fully stable. This shift toward a test-first approach is meant to address exactly that.

What changes

A total of 19 resources are now considered stable as of v5.8.4:

• cloudflare_argo_smart_routing
• cloudflare_bot_management
• cloudflare_list / cloudflare_list_item
• cloudflare_load_balancer / cloudflare_load_balancer_monitor / cloudflare_load_balancer_pool
• cloudflare_spectrum_application
• cloudflare_managed_transforms
• cloudflare_url_normalization_settings
• cloudflare_snippet / cloudflare_snippet_rules
• cloudflare_zero_trust_access_application / _access_group / _access_identity_provider / _access_mtls_certificate / _access_mtls_hostname_settings / _access_policy
• cloudflare_zone

That's a big batch of resources people actually touch in production, like Load Balancer and Zero Trust Access. On top of that, multipart handling was restored for cloudflare_snippet, and the recurring diff issue on terraform plan / apply for cloudflare_bot_management was resolved.

Dive Deep

Here are a few of the issues closed in this release:

• Using cloudflare_snippets triggered an "Uncaught Error: No such module" error (#5017)
• Migrations for Durable Objects on cloudflare_workers_script weren't recorded in tfstate, blocking upgrades between versions (#5701)
• Importing cloudflare_argo_smart_routing didn't read the actual value (#5640)

On upgrading, Cloudflare is explicit: they suggest holding off on migrating to v5 while stabilization work continues. If you do want to migrate, a migration guide with an automated script powered by Grit is available, though it doesn't support setups using Terraform modules — those need manual migration. As always, run terraform plan to check the diff before applying.

Wrap-up

• Terraform provider v5.8.4 was released
• Cloudflare revealed a shift toward more comprehensive, test-driven development
• 19 resources are now stable, including Load Balancer and Zero Trust Access
• Multipart handling for cloudflare_snippet was restored, and cloudflare_bot_management diff issues were resolved
• Cloudflare still recommends holding off on migrating to v5 until stabilization is complete (manual migration needed if you use modules)

If you manage Load Balancer, Zero Trust Access, or Snippets through Terraform, you should see fewer diffs and errors now — worth checking out!