pulumi / pulumi-cloudflare

Pulumi's Cloudflare package, providing multi-language infrastructure as code for Cloudflare
Apache License 2.0
99 stars 12 forks source link

The "replace_insecure_js" zone setting override is not supported #904

Open the-gigi opened 1 week ago

the-gigi commented 1 week ago

Describe what happened

This setting is defined here: https://developers.cloudflare.com/waf/tools/replace-insecure-js-libraries/

missing at least from Java and C# implementations of the ZoneSettingsOverrideSettingsArgs class:

Sample program

N/A

Log output

N/A

Affected Resource(s)

ZoneSettingsOverride

Output of pulumi about

CLI          
Version      3.131.0
Go Version   go1.23.0
Go Compiler  gc

Plugins
KIND      NAME  VERSION
language  java  unknown

Host     
OS       darwin
Version  14.1
Arch     arm64

This project is written in java: executable='/Users/gigi/.sdkman/candidates/java/current/bin/java' version='openjdk 21.0.2 2024-01-16 LTS
OpenJDK Runtime Environment Temurin-21.0.2+13 (build 21.0.2+13-LTS)
OpenJDK 64-Bit Server VM Temurin-21.0.2+13 (build 21.0.2+13-LTS, mixed mode)' java='/Users/gigi/.sdkman/candidates/java/current/bin/java' javac='21.0.2' maven='Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae)'

Current Stack: organization/cloudflare/production

TYPE                                                        URN
pulumi:pulumi:Stack                                         urn:pulumi:production::cloudflare::pulumi:pulumi:Stack::cloudflare-production
pulumi:providers:cloudflare                                 urn:pulumi:production::cloudflare::pulumi:providers:cloudflare::default_5_38_0
cloudflare:index/zone:Zone                                  urn:pulumi:production::cloudflare::cloudflare:index/zone:Zone::insurbot.com
cloudflare:index/zoneSettingsOverride:ZoneSettingsOverride  urn:pulumi:production::cloudflare::cloudflare:index/zoneSettingsOverride:ZoneSettingsOverride::settingsOverride_5e284095faa7f1d18edd609de6e279ca

Found no pending operations associated with production

Backend        
Name           Gigis-MacBook-Pro.local
URL            s3://invisible-pulumi/aws?profile=ProdAdmin
User           gigi
Organizations  
Token type     personal

No dependencies found

Pulumi locates its logs in /var/folders/1f/xlz36fws2hl_3vn2_tl8zl_h0000gn/T/ by default

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction. To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

guineveresaenger commented 1 week ago

hi @the-gigi - thank you for filing this issue.

It appears as though this is a setting override not yet implemented in the underlying Terraform provider, so we are not currently supporting this setting.

We'd encourage you to open an issue upstream to this effect. The Cloudflare team have the expertise to add this functionality, and we'll have it available as soon as they do.

the-gigi commented 1 week ago

Thank you @guineveresaenger . I was thinking as workaround to use terraform provider through the new support for any terraform provider. I didn't realize the Pulumi cloudflare provider is already implemented on top of the terraform provider :-)

I'll open issues upstream.