Cloudflare's Terraform provider v5.9 brings cloudflare_snippet to life!

Hi, I'm Shii-chan! There's another update to Cloudflare's Terraform provider today. If you're managing Cloudflare with IaC, this one's worth a look!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to Cloudflare's Changelog, Terraform provider v5.9 was released on August 29, 2025. The v5 provider, launched earlier this year, has received a lot of issue reports from the community, and Cloudflare had already committed to a two-week release cadence to improve its stability and reliability. This v5.9 release is part of that ongoing effort.

Cloudflare also revealed a change in how they're approaching fixes. Instead of tackling issues one by one (issue-to-issue), they're now stabilizing specific resources at a time (resource-per-resource).

The story so far

Back in June, v5.6.0 also shipped a batch of bug fixes for the v5 provider, but that release worked through reported issues in order. The problem was that issues tied to a single resource were often scattered across many separate reports, making it hard to say with confidence that any one resource was fully stable.

So Cloudflare shifted to targeting one specific resource per release, closing every issue tied to that resource before moving on to the next.

What changes

Four resources are now considered stable as of v5.9:

• cloudflare_zone_setting
• cloudflare_worker_script
• cloudflare_worker_route
• tiered_cache

These are resources people touch constantly in day-to-day operations, so it's good news for teams managing zone settings, Workers, or Tiered Cache through Terraform.

The other big change is a new cloudflare_snippet resource. It replaces the existing cloudflare_snippets resource and lets you manage Cloudflare's Snippets feature through Terraform. cloudflare_snippets is now deprecated as of this release (though it still works). Cloudflare is asking users to move to cloudflare_snippet as soon as possible, so if you're managing Snippets with Terraform, it's worth planning that migration.

Dive Deep

Beyond the resource stabilization work, this release includes several smaller improvements:

• DNS records: Improved accuracy of drift detection (catching unintended diffs)
• Load Balancer: Fixed inconsistencies in the created_on field, and improved pool configuration handling
• Bot Management: Improved state consistency for the auto-update model, plus fight mode behavior improvements

The v5.9.0 release notes on GitHub also mention fixes for load balancer monitor / pool resources that kept detecting drift on every refresh or update, and fixes for recurring diffs on Zero Trust device profile resources. In total, 17 issues were closed as part of this release.

For anyone still weighing a move from v4 to v5, the migration guide is still available, so check it out if you haven't upgraded yet.

Wrap-up

• Cloudflare released Terraform provider v5.9
• The fix strategy shifted from issue-by-issue to stabilizing one resource at a time
• cloudflare_zone_setting, cloudflare_worker_script, cloudflare_worker_route, and tiered_cache are now stable
• A new cloudflare_snippet resource arrived, deprecating cloudflare_snippets, which you should migrate away from soon
• DNS drift detection, load balancer created_on inconsistencies, and Bot Management state handling were also improved

If you're an infra engineer managing Cloudflare zone settings, Workers, or Snippets through Terraform, this update is especially worth your attention if you're still using cloudflare_snippets!