Terraform v5.14.0 keeps the momentum going — a real migration tool is coming in March 2026

Hey, it's me! I've got another Terraform provider update for Cloudflare today. It looks like a quiet release, but there's a nice bit of news tucked in there!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to the Cloudflare Changelog, Terraform provider v5.14.0 was released on December 5, 2025. The v5 provider, launched earlier this year, has received a lot of issue reports from the community, and Cloudflare has kept up a 2-3 week release cadence to address them. This release reiterates the shift from an issue-to-issue approach to a resource-per-resource approach.

The story so far

As covered before, the v5 provider being auto-generated from OpenAPI schemas led to a wave of reported issues, and Cloudflare has been addressing them through ongoing releases. Since the strategy shift, they've been targeting one resource at a time for stabilization while also making sure it's migration-friendly for people moving from v4 to v5.

What changes

First, a deprecation notice: the api_shield_discovery_operation resource is being adjusted to reduce the need for active management of dynamically discovered API endpoints, improving maintainability. The corresponding public API endpoint itself isn't affected and will continue to be supported.

On the feature side, pages_project gained v4 → v5 migration tests.

Here's the list of bug fixes:

• account_members: member policies are now treated as a Set
• pages_project: ensures refresh plans are never empty
• R2: improved the sweeper (cleanup process for unused resources)
• workers_kv: ignores the value import state during verify
• workers_script: no longer treats the migrations attribute as WriteOnly
• workers_script: resolved resource drift when a worker has an unmanaged secret
• zero_trust_device_posture_rule: preserves input.version and other fields
• zero_trust_dlp_custom_profile: added sweepers
• zone_subscription / account_subscription: added partners_ent as a valid value for rate_plan.id
• zone: ensures datasource model schema parity
• subscription: updated the import signature to accept account_id/subscription_id when importing an account subscription

Dive Deep

The most interesting part of this release is the upgrade guidance. Cloudflare still recommends holding off on migrating to v5 while stabilization continues, but they've now also confirmed a new migration tool is coming in March 2026 to help support v4-to-v5 transitions for their most popular resources. Previously, the guidance pointed to a Grit-based automated script; this is a further commitment, with a concrete timeline for a proper migration tool. If your team is still on v4, this gives you a useful planning marker.

Wrap-up

• Terraform provider v5.14.0 was released
• api_shield_discovery_operation is being deprecated (the underlying public API remains supported)
• pages_project gained v4-to-v5 migration tests
• A broad set of bug fixes landed, covering account_members, workers_script, zero_trust_device_posture_rule, and more
• A proper v4-to-v5 migration tool for popular resources is planned for March 2026

If your team is still running v4, it's worth planning your migration timeline around that March 2026 tool!