Skip to content

cloudflare_zero_trust_list always marked for change due to read only attributes #5882

@pcanham

Description

@pcanham

Confirmation

  • This is a bug with an existing resource and is not a feature request or enhancement. Feature requests should be submitted with Cloudflare Support or your account team.
  • I have searched the issue tracker and my issue isn't already found.
  • I have replicated my issue using the latest version of the provider and it is still present.

Terraform and Cloudflare provider version

OpenTofu v1.10.5
on darwin_arm64

  • provider registry.opentofu.org/cloudflare/cloudflare v5.8.2
  • provider registry.opentofu.org/hashicorp/http v3.5.0
  • provider registry.opentofu.org/hashicorp/local v2.5.3
  • provider registry.opentofu.org/hashicorp/null v3.2.4
  • provider registry.opentofu.org/hashicorp/tls v4.1.0

Affected resource(s)

cloudflare_zero_trust_list

Terraform configuration files

resource "cloudflare_zero_trust_list" "list_apple_https_bypass" {
  account_id = var.cloudflare_account_id
  items      = [{ value = "mzstatic.com" }, { value = "apple.com" }, { value = "icloud.com" }, { value = "appldnld.apple.com.edgesuite.net" }, { value = "cdn-apple.com" }, { value = "apple-cloudkit.com" }, { value = "apple-livephotoskit.com" }, { value = "icloud-content.com" }]
  name       = "[TEST] Apple Bypass HTTPS Inspection"
  type       = "DOMAIN"
}

Link to debug output

https://gist.github.com/pcanham/ef528e00e650aeeccbfdad334fa89892

Panic output

No response

Expected output

No change

Actual output

cloudflare_zero_trust_list.list_apple_https_bypass will be updated in-place

~ resource "cloudflare_zero_trust_list" "list_apple_https_bypass" {
~ created_at = "2025-08-07T12:15:48Z" -> (known after apply)
id = "10bda2c8-7e71-42c2-b457-87ddd9cef554"
~ list_count = 8 -> (known after apply)
name = "[TEST] Apple Bypass HTTPS Inspection"
~ updated_at = "2025-08-07T12:15:48Z" -> (known after apply)
# (3 unchanged attributes hidden)
}

Steps to reproduce

create a zt list, then re-run plan

Additional factoids

No response

References

5452

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.version/5Categorizes issue or PR as related to version 5 of the provider.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions