Update Terraform hcloud to v1.68.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
hcloud (source)	required_provider	minor	1.51.0 → 1.68.0

---

Release Notes

hetznercloud/terraform-provider-hcloud (hcloud)

v1.68.0

Compare Source

Compare to previous version

Features

• load_balancer_type: add deprecation details and warnings (#​1512) (44a81e1)
• server_type: add deprecation warnings (#​1512) (44a81e1)

Bug Fixes

• zone_record: set identity after read/update (#​1507) (daf4b85)

v1.67.0

Compare Source

Compare to previous version

Removed datacenter from Server and Primary IP

The deprecated datacenter attribute was marked for removal from the Server and Primary IP resources/data sources. You must use the location attribute instead. Since the property was already removed from the Hetzner Cloud API, we do not consider this a breaking change (see changelog entry).

[!IMPORTANT]
Action required: Please update all configuration that uses the datacenter attribute to use the location attribute instead.

Before:

resource "hcloud_server" "main" {
  // ...
  datacenter = "hel1-dc1"
}

resource "hcloud_primary_ip" "main" {
  // ...
  datacenter = "hel1-dc1"
}

After:

resource "hcloud_server" "main" {
  // ...
  location = "hel1"
}

resource "hcloud_primary_ip" "main" {
  // ...
  location = "hel1"
}

Features

• remove datacenter from primary ips and servers (#​1501) (59a48f5)

Bug Fixes

• server: do not validate unknown network config (#​1493) (f180913)

v1.66.1

Compare Source

Compare to previous version

Bug Fixes

• primary_ip: only validate assignee attributes when known (#​1487) (8fc1a69)
• server: inconsistent image attribute when using data source (#​1489) (3fefa12)

v1.66.0

Compare Source

Datacenter data sources are deprecated

The hcloud_datacenter and hcloud_datacenters data sources are deprecated and will be removed after 1 Oct. 2026. After this date, requests to the datacenters API endpoints will return HTTP 410 Gone.

Please use the hcloud_location and hcloud_locations data sources instead.

See the changelog for more details.

Features

• image: warn when using a deprecated image (#​1456)
• deprecate hcloud_datacenter(s) data sources (#​1463)

Bug Fixes

• handle invalid input errors without details (#​1453)

v1.65.0

Compare Source

Features

• primary-ip: make auto_delete attribute optional (#​1429)
• server: remove allow_deprecated_images from hcloud_server (#​1435)

Bug Fixes

• primary-ip: do not update assignee on unknown assignee_type (#​1440)

v1.64.0

Compare Source

Features

• load-balancer: support timeout_idle http service attribute (#​1398)
• drop support for terraform v1.13 (#​1418)
• add support for terraform v1.15 (#​1418)
• drop support for opentofu v1.9 (#​1420)
• add support for opentofu v1.12 (#​1420)

Bug Fixes

• rdns: gracefully handle not found errors (#​1419)
• server: handle ipv6 when removing public net block (#​1427)
• server: allow both network_id and subnet_id to be defined (#​1430)

v1.63.0

Compare Source

Features

• server: add subnet_id support (#​1278)

v1.62.0

Compare Source

Primary IPs assignee_type behavior change

The hcloud_primary_ip resource will now:

• raise a warning if assignee_type attribute is configured without assignee_id attribute
• raise an error if assignee_id attribute is configured without assignee_type attribute

As of 1 August 2026, the behavior of the Primary IP assignee_type property will change, and will return unassigned when the Primary IP is not assigned (when assignee_id is null). The goal is to eventually assign Primary IPs to other resource types, not only to server.

See the changelog for more details.

In addition, the Primary IP request body assignee_type property of the operation POST /v1/primary_ips is now optional. Primary IPs created without assignee_type return server until 1 August 2026, after this date, its value will be unassigned.

See the changelog for more details.

Features

• primary-ip: assignee_type attribute is now optional (#​1395)

Bug Fixes

• firewall: apply_to update removes firewall from state when target resource is not found (#​1380)

v1.61.0

Compare Source

Available and recommended Server Types have been moved

• Data sources hcloud_datacenter/hcloud_datacenters[]: Attributes supported_server_type_ids[] and available_server_type_ids[] have been deprecated.
• Data sources hcloud_server_type/hcloud_server_types[]: Attributes locations[].available and locations[].recommended have been added as a replacement for the deprecated datacenter attributes.

See the changelog for more details.

Features

• server: implement actions for poweron, poweroff, reset, and reboot (#​1342)
• datacenter, server_type: move available and recommended to server_type (#​1378)

Bug Fixes

• primary-ip: reassigning fails as IP needs to be unassigned first (#​1353)
• primary-ip: unassign before deleting a primary ip (#​1384)
• include response correlation id in api error diagnostics (#​1386)

v1.60.1

Compare Source

Bug Fixes

• storage-box: subaccount name was ignored (#​1344)

v1.60.0

Compare Source

Features

• add zone_record resource (#​1228)
• Storage Box support no longer experimental (#​1329)
• floating-ip: unassign from server before deleting it (#​1335)

v1.59.0

Compare Source

Features

• add name to Storage Box Subaccount (#​1323)

Bug Fixes

• support importing storage box without forced replacement (#​1314)
• panic on nil action in settle actions helper (#​1321)

v1.58.0

Compare Source

Breaking Change for the Storage Box resource

Previously the hcloud_storage_box resource ignored any changes to the ssh_keys attribute to avoid accidentally deleting the Storage Box (SSH Keys can not be changed through the API after the Storage Box is created).

This is changed in this release, we now mark the resource as "requires replacement" if the SSH Keys are changed. If you want to ignore changes and keep the previous behaviour, please add the attribute to lifecycle.ignore_changes:

resource "hcloud_storage_box" "example" {
  // Other attributes

  ssh_keys = [ "..." ]
  lifecycle {
    ignore_changes = [ ssh_keys ]
  }
}

We are releasing this breaking change in a minor version as the Storage Box support is marked as experimental.

Deprecation of datacenter attribute for Primary IPs and Servers

The datacenter attributes is deprecated in Primary IPs and Servers API resources and will be removed after 1 July 2026. See https://docs.hetzner.cloud/changelog#2025-12-16-phasing-out-datacenters for more details.

Therefore, datacenter attributes is deprecated in favour of the location attribute in the following Terraform resources/datasources:

• hcloud_server
• data.hcloud_server
• data.hcloud_servers
• hcloud_primary_ip
• data.hcloud_primary_ip
• data.hcloud_primary_ips

The location attribute already exists for Servers, and was added for Primary IPs.

The datacenter attribute will not be updated any more after it is no longer returned by the API. For existing resources this will keep the previous value, for new resources this will result in an empty string.

Please make sure to upgrade to v1.58.0+ before the removal date to avoid potential crashes in the provider.

Features

• drop support for OpenTofu v1.8
• add support for OpenTofu v1.11
• storage-box: stop ignoring changes to ssh keys and replace resource instead (#​1296)
• deprecate datacenter in primary ips and servers (#​1309)

Bug Fixes

• storage-box: run actions serially (#​1294)
• zone: using variable for primary nameservers causes error (#​1306)
• storage-box: retry snapshot+subaccount create when locked (#​1307)

v1.57.0

Compare Source

Storage Box API Experimental

This release adds support for the Storage Box API.

The Storage Box integration will be introduced as an experimental feature. This experimental phase is expected to last until 2 January 2026. During this period, upcoming minor releases of the project may include breaking changes to features related to the Storage Box API. You can find out the current state of this in #​1285.

This release includes all changes from the recent Storage Box API changelog entry.

Examples

resource "hcloud_storage_box" "backups" {
  name             = "backups"
  storage_box_type = "bx21"
  location         = "hel1"
  password         = var.storage_box_password
}

resource "hcloud_storage_box_snapshot" "tool_xyz_migration" {
  storage_box_id = hcloud_storage_box.backups.id

  description = "Before Tool XYZ Migration"
  labels = {
    env = "production"
  }
}

resource "hcloud_storage_box_subaccount" "team_badger" {
  storage_box_id = hcloud_storage_box.backups.id

  home_directory = "teams/badger/"
  password       = var.team_badger_password
}

Features

• drop builds for windows arm (32 bit) (#​1260)
• drop support for terraform v1.11
• drop support for terraform v1.12
• add support for terraform v1.13
• add support for terraform v1.14
• add support for Storage Boxes (#​1166)

Bug Fixes

• abort when data transformation errors (#​1253)
• ensure partially created resources are tainted in the state (#​1257)
• dns records order is not guaranteed (#​1259)

v1.56.0

Compare Source

DNS API is now generally available

The DNS API is now generally available, as well as support for features in this project that are related to the DNS API.

To migrate existing zones to the new DNS API, see the DNS migration guide.

See the changelog for more details.

Server and load balancer network attachment

With this release, the hcloud_server_network and hcloud_load_balancer_network resource now supports assigning a server or load balancer to a specific network subnet using the subnet_id attribute. The subnet_id attribute also validates that the network_id and ip attributes are consistent with the subnet_id. If they are not consistent, the resource will be replaced.

In the hcloud_server_network resource, the alias_ips attributes now defaults to an empty set when undefined.

Features

• attach server to a specific network subnet (#​1217)
• attach load balancer to a specific network subnet (#​1242)
• DNS support is now generally available (#​1247)

v1.55.0

Compare Source

Features

• support managing records of type SOA (#​1225)
• firewall: importing firewall attachments (#​1231)
• add txt_record helper function (#​1227)

Bug Fixes

• load-balancer: mark health check retries as required (#​1232)

v1.54.0

Compare Source

DNS API Beta

This release adds support for the new DNS API.

The DNS API is currently in beta, which will likely end on 10 November 2025. After the beta ended, it will no longer be possible to create new zones in the old DNS system. See the DNS Beta FAQ for more details.

Future minor releases of this project may include breaking changes for features that are related to the DNS API.

See the DNS API Beta changelog for more details.

Examples

resource "hcloud_zone" "example" {
  name = "example.com"
  mode = "primary"
  labels = {
    key = "value"
  }
}

resource "hcloud_zone_rrset" "apex_a_example" {
  zone = hcloud_zone.example.name
  name = "@​"
  type = "A"
  records = [
    { value = "201.78.10.45", comment = "server1" },
  ]
}

Features

• support the new DNS API (#​1210)

v1.53.1

Compare Source

Bug Fixes

• show warnings using diagnostics instead of logs (#​1197)
• also check server type deprecation after server creation (#​1201)

v1.53.0

Compare Source

Server Types now depend on Locations.

• We added a new locations property to the Server Types resource. The new property defines a list of supported Locations and additional per Locations details such as deprecations information.

• We deprecated the deprecation property from the Server Types resource. The property will gradually be phased out as per Locations deprecations are being announced. Please use the new per Locations deprecation information instead.

See our changelog for more details.

Upgrading

// Before
data "hcloud_server_type" "main" {
  name = "cx22"
}

check "server_type" {
  assert {
    condition     = !data.hcloud_server_type.main.is_deprecated
    error_message = "Server Type ${data.hcloud_server_type.main.name} is deprecated"
  }
}

// After
data "hcloud_location" "main" {
  name = "fsn1"
}

data "hcloud_server_type" "main" {
  name = "cx22"
}

locals {
  server_type_location = one([
    for o in data.hcloud_server_type.main.locations : o
    if o.name == data.hcloud_location.main.name
  ])
}

check "server_type_location" {
  assert {
    condition     = local.server_type_location != null
    error_message = "Server Type ${data.hcloud_server_type.main.name} does not exists in Location ${data.hcloud_location.main.name}"
  }
  assert {
    condition     = !local.server_type_location.is_deprecated
    error_message = "Server Type ${data.hcloud_server_type.main.name} is deprecated in Location ${data.hcloud_location.main.name}"
  }
}

Features

• add category property to server type (#​1184)
• per locations server types (#​1193)

Bug Fixes

• ensure exponential poll backoff is configured (#​1160)
• handle not found volume deletion (#​1189)
• wait for floating_ip assign action to complete (#​1195)
• add experimental features maturity (#​1191)

v1.52.0

Compare Source

Features

• drop support for terraform v1.9 (#​1125)
• drop support for terraform v1.10 (#​1126)
• add support for terraform v1.11 (#​1127)
• add support for terraform v1.12 (#​1128)
• warn when experimental features are used (#​1155)
• drop support for opentofu v1.7 (#​1158)
• add support for opentofu v1.10 (#​1159)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.