Delegated DCV Records are missing from Resource Certificate Pack

[brandonjfordham]

Confirmation

• My issue isn't already found on the issue tracker.
• I have replicated my issue using the latest version of the provider and it is still present.

Terraform and Cloudflare provider version

Terraform v1.5.0

Affected resource(s)

certificate_pack

Terraform configuration files

terraform {
  required_version = ">= 0.12"
  required_providers {
    aws = ">= 2.0"
    cloudflare = {
      source  = "cloudflare/cloudflare"
      version = "4.8.0"
    }
  }
}

provider "cloudflare" {
  api_token  = "redacted"
}

# Create new Cloudflare zone, this is the main "object" we will interact with in Cloudflare.
resource "cloudflare_zone" "this" {
  zone   = "redacted"
  paused = false
  plan   = "enterprise"
  type   = "partial"
  account_id = "redacted"
}

# Create new Advanced Certificate Manager Certificate Pack
resource "cloudflare_certificate_pack" "this" {
  zone_id               = cloudflare_zone.this.id
  type                  = "advanced"
  hosts                 = [cloudflare_zone.this.zone]
  validation_method     = "txt"
  validity_days         = 90
  certificate_authority = "lets_encrypt"
  cloudflare_branding   = false

  lifecycle {
    create_before_destroy = true
  }
}

Link to debug output

https://gist.github.com/brandonjfordham/a09e4021f1869e0653b2ca84e85c7ca5

Panic output

No response

Expected output

DCV Delegation records should be available as a nested schema:

resource "cloudflare_certificate_pack" "this" {
    certificate_authority  = "lets_encrypt"
    cloudflare_branding    = false
    hosts                  = [
        "example.com,
    ]
    id                     = "373b500e-51aa-4601-b8d1-f79305e1efb9"
    type                   = "advanced"
    validation_method      = "txt"
    validity_days          = 90
    wait_for_active_status = false
    zone_id                = "19ad02061fb9c06290bfb23eeb1791d9"

    validation_records {
        emails    = []
        txt_name  = "_acme-challenge.example.com"
        txt_value = "redacted"
    }

    dcv_delegation_records {
          cname  "_acme-challenge.example.com",
          cname_target "example.com.redacted.dcv.cloudflare.com"
    }
    
}

Actual output

DCV Delegation records are missing.

resource "cloudflare_certificate_pack" "this" {
    certificate_authority  = "lets_encrypt"
    cloudflare_branding    = false
    hosts                  = [
        "example.com,
    ]
    id                     = "373b500e-51aa-4601-b8d1-f79305e1efb9"
    type                   = "advanced"
    validation_method      = "txt"
    validity_days          = 90
    wait_for_active_status = false
    zone_id                = "19ad02061fb9c06290bfb23eeb1791d9"

    validation_records {
        emails    = []
        txt_name  = "_acme-challenge.example.com"
        txt_value = "redacted"
        
}

Steps to reproduce

1. Create a zone and certificate pack.
2. Verify the DCV delegation records don't exist when viewing the terraform resource.

Additional factoids

No response

References

This bug first needs to be fixed in the cloudflare-go repo: cloudflare/cloudflare-go#1318

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[jacobbednarz]

This issue has been closed as we are now tracking this internally with service teams directly. If you would like an update or to be notified when/if the product ships with this change, please reach out to Cloudflare Support or your account team who can watch the internal feature request for you.