fix: Fixed zpa_application_segment_pra

CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 3.33.8 (October, 29 2024)
+
+### Notes
+
+- Release date: **(October, 29 2024)**
+- Supported Terraform version: **v1.x**
+
+### Bug Fixes
+- [PR #499](https://github.com/zscaler/terraform-provider-zpa/pull/499) - Fixed `zpa_application_segment_pra` import function and normalization of computed attributes.
+
+### Enhancements
+- [PR #499](https://github.com/zscaler/terraform-provider-zpa/pull/499) - Added new `zpa_application_segment` attribute `inspect_traffic_with_zia`
+
 ## 3.33.7 (October, 3 2024)
 
 ### Notes
@@ -10,8 +23,11 @@
 ### Enhancements
 - [PR #496](https://github.com/zscaler/terraform-provider-zpa/pull/496) - Added new `object_type` `RISK_FACTOR_TYPE` to the following ZPA access policy resources: `zpa_policy_access_rule`, and `zpa_policy_access_rule_v2`
 
+**NOTE**  `RISK_FACTOR_TYPE` is the Risk Score criteria equivalent in the ZPA UI and supports the following values:
+`UNKNOWN`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`
+
 ### Bug Fixes
-- [PR #496](https://github.com/zscaler/terraform-provider-zpa/pull/496) - Fixed issue with attribute `tcp_port_range`/`udp_port_range` and `tcp_port_ranges`/`udp_port_ranges` within `zpa_application_segment`. The fix ensure that both port configuration formats are suported separately without mid-conversion in between. The fix also ensure the port configuration order is ignored during apply and update process. [Issue #490](https://github.com/zscaler/terraform-provider-zpa/issues/490).
+- [PR #496](https://github.com/zscaler/terraform-provider-zpa/pull/496) - Fixed issue with attribute `tcp_port_range`/`udp_port_range` and `tcp_port_ranges`/`udp_port_ranges` within `zpa_application_segment`. The fix ensure that both port configuration formats are supported interchangeably. The fix also ensure the port configuration order is maintained during configuration. This fix does not impact exist configuration. [Issue #490](https://github.com/zscaler/terraform-provider-zpa/issues/490).
 
 
 ### Internal Changes

GNUmakefile

@@ -55,14 +55,14 @@ test\:integration\:zpa:
 build13: GOOS=$(shell go env GOOS)
 build13: GOARCH=$(shell go env GOARCH)
 ifeq ($(OS),Windows_NT)  # is Windows_NT on XP, 2000, 7, Vista, 10...
-build13: DESTINATION=$(APPDATA)/terraform.d/plugins/$(ZPA_PROVIDER_NAMESPACE)/3.33.7/$(GOOS)_$(GOARCH)
+build13: DESTINATION=$(APPDATA)/terraform.d/plugins/$(ZPA_PROVIDER_NAMESPACE)/3.33.8/$(GOOS)_$(GOARCH)
 else
-build13: DESTINATION=$(HOME)/.terraform.d/plugins/$(ZPA_PROVIDER_NAMESPACE)/3.33.7/$(GOOS)_$(GOARCH)
+build13: DESTINATION=$(HOME)/.terraform.d/plugins/$(ZPA_PROVIDER_NAMESPACE)/3.33.8/$(GOOS)_$(GOARCH)
 endif
 build13: fmtcheck
 	@echo "==> Installing plugin to $(DESTINATION)"
 	@mkdir -p $(DESTINATION)
-	go build -o $(DESTINATION)/terraform-provider-zpa_v3.33.7
+	go build -o $(DESTINATION)/terraform-provider-zpa_v3.33.8
 
 vet:
 	@echo "==> Checking source code against go vet and staticcheck"

docs/data-sources/zpa_app_connector_group.md

@@ -71,18 +71,15 @@ The following attributes are exported:
   - ``Previous Default`` = ``1``
   - ``New Release`` = ``2``
 - `version_profile_visibility_scope` - (String)
-  Exported values are:
+- `dns_query_type` - (String) Whether IPv4, IPv6, or both, are enabled for DNS resolution of all applications in the App Connector Group. Exported values are:
   - ``"IPV4_IPV6"``
   - ``"IPV4"``
   - ``"IPV6``
-- `country_code` - (String)
-- `dns_query_type` - (String)
-  - ``0`` = ``Default``
-  - ``1`` = ``Previous Default``
-  - ``2`` = ``New Release``
+- `country_code` - (String) The country code of the App Connector.
 - `geo_location_id` - (String)
-- `use_in_dr_mode` - (Optional) Supported values: `true`, `false`
-- `pra_enabled` - (Optional) Supported values: `true`, `false`
-- `waf_disabled` - (Optional) Supported values: `true`, `false`
+- `use_in_dr_mode` - (boolean) Supported values: `true`, `false`
+- `pra_enabled` - (boolean) Supported values: `true`, `false`
+- `waf_disabled` - (boolean) Supported values: `true`, `false`
 - `microtenant_id` (string) The ID of the microtenant the resource is to be associated with.
 - `microtenant_name` (string) The name of the microtenant the resource is to be associated with.
+- `lss_app_connector_group` (boolean) Whether or not the App Connector Group is configured for the Log Streaming Service (LSS).

docs/guides/release-notes.md

@@ -12,10 +12,23 @@ Track all ZPA Terraform provider's releases. New resources, features, and bug fi
 
 ---
 
-``Last updated: v3.33.7``
+``Last updated: v3.33.8``
 
 ---
 
+## 3.33.8 (October, 29 2024)
+
+### Notes
+
+- Release date: **(October, 29 2024)**
+- Supported Terraform version: **v1.x**
+
+### Bug Fixes
+- [PR #499](https://github.com/zscaler/terraform-provider-zpa/pull/499) - Fixed `zpa_application_segment_pra` import function and normalization of computed attributes.
+
+### Enhancements
+- [PR #499](https://github.com/zscaler/terraform-provider-zpa/pull/499) - Added new `zpa_application_segment` attribute `inspect_traffic_with_zia`
+
 ## 3.33.7 (October, 3 2024)
 
 ### Notes

docs/resources/zpa_app_connector_group.md

@@ -66,14 +66,15 @@ The following arguments are supported:
   - ``0`` = ``Default``
   - ``1`` = ``Previous Default``
   - ``2`` = ``New Release``
-- `dns_query_type` - (String) Whether IPv4, IPv6, or both, are enabled for DNS resolution of all applications in the App Connector Group. Supported values are: ``IPV4``, ``IPV6``, or``IPV4_IPV6``
+- `dns_query_type` - (String) Whether IPv4, IPv6, or both, are enabled for DNS resolution of all applications in the App Connector Group. Supported values are: ``IPV4``, ``IPV6``, or ``IPV4_IPV6``
 - `tcp_quick_ack_app` - (Boolean) Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value. Supported values: `true`, `false`
 - `tcp_quick_ack_assistant` - (Boolean) Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value. Supported values: `true`, `false`
 - `tcp_quick_ack_read_assistant` - (Boolean) Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value. Supported values: `true`, `false`
 - `use_in_dr_mode` - (Boolean) Whether or not the App Connector Group is designated for disaster recovery. Supported values: `true`, `false`
 - `pra_enabled` - (Boolean) Whether or not Privileged Remote Access is enabled on the App Connector Group. Supported values: `true`, `false`
 - `waf_disabled` - (Boolean) Whether or not AppProtection is disabled for the App Connector Group. Supported values: `true`, `false`
 - `microtenant_id` (String) The unique identifier of the Microtenant for the ZPA tenant. If you are within the Default Microtenant, pass microtenantId as `0` when making requests to retrieve data from the Default Microtenant. Pass microtenantId as null to retrieve data from all customers associated with the tenant.
+- `lss_app_connector_group` (boolean) Whether or not the App Connector Group is configured for the Log Streaming Service (LSS).
 
 ## Import
 

go.mod

@@ -11,7 +11,7 @@ require (
 	github.com/hashicorp/terraform-plugin-docs v0.19.4
 	github.com/hashicorp/terraform-plugin-sdk v1.17.2
 	github.com/hashicorp/terraform-plugin-sdk/v2 v2.34.0
-	github.com/zscaler/zscaler-sdk-go/v2 v2.72.4
+	github.com/zscaler/zscaler-sdk-go/v2 v2.72.5
 )
 
 require (
@@ -81,7 +81,7 @@ require (
 	golang.org/x/net v0.25.0 // indirect
 	golang.org/x/sync v0.8.0 // indirect
 	golang.org/x/sys v0.20.0 // indirect
-	golang.org/x/text v0.18.0 // indirect
+	golang.org/x/text v0.19.0 // indirect
 	golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240227224415-6ceb2ff114de // indirect

go.sum

@@ -441,8 +441,8 @@ github.com/zclconf/go-cty v1.14.4/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgr
 github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b h1:FosyBZYxY34Wul7O/MSKey3txpPYyCqVO5ZyceuQJEI=
 github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b/go.mod h1:ZRKQfBXbGkpdV6QMzT3rU1kSTAnfu1dO8dPKjYprgj8=
 github.com/zclconf/go-cty-yaml v1.0.2/go.mod h1:IP3Ylp0wQpYm50IHK8OZWKMu6sPJIUgKa8XhiVHura0=
-github.com/zscaler/zscaler-sdk-go/v2 v2.72.4 h1:GMCmD87QiazaWxoJANTvfeGdmuCxbyaN2OQxBz09Me0=
-github.com/zscaler/zscaler-sdk-go/v2 v2.72.4/go.mod h1:DW8JW8Cv2uxsfdlPN/Szk+CX9/nPyjhk/aERtTbJVYo=
+github.com/zscaler/zscaler-sdk-go/v2 v2.72.5 h1:IL9eFbcvDEoS6x17ipy/kThgubdiknIeXtA37hn7SQY=
+github.com/zscaler/zscaler-sdk-go/v2 v2.72.5/go.mod h1:ugDudbyESUrANGw74moJypgVnWuOyLm8NyIJgfUzNNo=
 go.abhg.dev/goldmark/frontmatter v0.2.0 h1:P8kPG0YkL12+aYk2yU3xHv4tcXzeVnN+gU0tJ5JnxRw=
 go.abhg.dev/goldmark/frontmatter v0.2.0/go.mod h1:XqrEkZuM57djk7zrlRUB02x8I5J0px76YjkOzhB4YlU=
 go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
@@ -613,8 +613,8 @@ golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.18.0 h1:XvMDiNzPAl0jr17s6W9lcaIhGUfUORdGCNsuLmPG224=
-golang.org/x/text v0.18.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM=
+golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=

zpa/data_source_zpa_app_connector_group.go

@@ -270,8 +270,9 @@ func dataSourceAppConnectorGroup() *schema.Resource {
 				},
 			},
 			"lss_app_connector_group": {
-				Type:     schema.TypeBool,
-				Computed: true,
+				Type:        schema.TypeBool,
+				Computed:    true,
+				Description: "Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)",
 			},
 			"tcp_quick_ack_app": {
 				Description: "Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.",

zpa/resource_zpa_app_connector_group.go

@@ -110,9 +110,10 @@ func resourceAppConnectorGroup() *schema.Resource {
 				Description:      "Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180",
 			},
 			"lss_app_connector_group": {
-				Type:     schema.TypeBool,
-				Optional: true,
-				Computed: true,
+				Type:        schema.TypeBool,
+				Optional:    true,
+				Computed:    true,
+				Description: "Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)",
 			},
 			"tcp_quick_ack_app": {
 				Description: "Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.",

zpa/resource_zpa_application_segment.go

@@ -129,6 +129,11 @@ func resourceApplicationSegment() *schema.Resource {
 				Optional:    true,
 				Description: "Whether this application is enabled or not.",
 			},
+			"inspect_traffic_with_zia": {
+				Type:        schema.TypeBool,
+				Optional:    true,
+				Description: "Indicates if Inspect Traffic with ZIA is enabled for the application.",
+			},
 			"health_check_type": {
 				Type:     schema.TypeString,
 				Optional: true,
@@ -309,6 +314,7 @@ func resourceApplicationSegmentRead(d *schema.ResourceData, meta interface{}) er
 	_ = d.Set("is_incomplete_dr_config", resp.IsIncompleteDRConfig)
 	_ = d.Set("is_cname_enabled", resp.IsCnameEnabled)
 	_ = d.Set("tcp_keep_alive", resp.TCPKeepAlive)
+	_ = d.Set("inspect_traffic_with_zia", resp.InspectTrafficWithZia)
 	_ = d.Set("name", resp.Name)
 	_ = d.Set("passive_health_enabled", resp.PassiveHealthEnabled)
 	_ = d.Set("ip_anchored", resp.IpAnchored)
@@ -446,6 +452,7 @@ func expandApplicationSegmentRequest(d *schema.ResourceData, client *Client, id
 		TCPKeepAlive:              d.Get("tcp_keep_alive").(string),
 		MicroTenantID:             d.Get("microtenant_id").(string),
 		PassiveHealthEnabled:      d.Get("passive_health_enabled").(bool),
+		InspectTrafficWithZia:     d.Get("inspect_traffic_with_zia").(bool),
 		DoubleEncrypt:             d.Get("double_encrypt").(bool),
 		Enabled:                   d.Get("enabled").(bool),
 		IpAnchored:                d.Get("ip_anchored").(bool),