terraform-provider-tomswallapi/internal/provider/resource_zone.go

package provider

import (
	"context"

	"github.com/hashicorp/terraform-plugin-framework/diag"
	"github.com/hashicorp/terraform-plugin-framework/path"
	"github.com/hashicorp/terraform-plugin-framework/resource"
	"github.com/hashicorp/terraform-plugin-framework/resource/schema"
	"github.com/hashicorp/terraform-plugin-framework/resource/schema/planmodifier"
	"github.com/hashicorp/terraform-plugin-framework/resource/schema/stringdefault"
	"github.com/hashicorp/terraform-plugin-framework/resource/schema/stringplanmodifier"
	"github.com/hashicorp/terraform-plugin-framework/tfsdk"
	"github.com/hashicorp/terraform-plugin-framework/types"
)

var (
	_ resource.Resource                = &zoneResource{}
	_ resource.ResourceWithImportState = &zoneResource{}
)

type zoneResource struct{ client *apiClient }

type zoneModel struct {
	Name    types.String `tfsdk:"name"`
	Type    types.String `tfsdk:"type"`
	Subnets types.List   `tfsdk:"subnets"`
	Parent  types.String `tfsdk:"parent"`
}

type zoneAPI struct {
	Name    string   `json:"name"`
	Type    string   `json:"type"`
	Subnets []string `json:"subnets"`
	Parent  string   `json:"parent,omitempty"`
}

func NewZoneResource() resource.Resource { return &zoneResource{} }

func (r *zoneResource) Metadata(_ context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse) {
	resp.TypeName = req.ProviderTypeName + "_zone"
}

func (r *zoneResource) Schema(_ context.Context, _ resource.SchemaRequest, resp *resource.SchemaResponse) {
	resp.Schema = schema.Schema{
		Description: "A fleet-global network segment (a named set of subnets). Zones are the topological anchors of the firewall model.",
		Attributes: map[string]schema.Attribute{
			"name": schema.StringAttribute{
				Description:   "Zone name (globally unique).",
				Required:      true,
				PlanModifiers: []planmodifier.String{stringplanmodifier.RequiresReplace()},
			},
			"type": schema.StringAttribute{
				Description: "Zone type: ip, ip6, or firewall.",
				Optional:    true,
				Computed:    true,
				Default:     stringdefault.StaticString("ip"),
			},
			"subnets": schema.ListAttribute{
				Description: "CIDRs belonging to this zone. May be empty for a no-subnet zone such as an internet-facing 'net'.",
				Optional:    true,
				ElementType: types.StringType,
			},
			"parent": schema.StringAttribute{
				Description: "Parent zone name for subzone nesting; the child's subnets must be within the parent's.",
				Optional:    true,
			},
		},
	}
}

func (r *zoneResource) Configure(_ context.Context, req resource.ConfigureRequest, resp *resource.ConfigureResponse) {
	r.client = configureClient(req, resp)
}

func (r *zoneResource) Create(ctx context.Context, req resource.CreateRequest, resp *resource.CreateResponse) {
	var plan zoneModel
	resp.Diagnostics.Append(req.Plan.Get(ctx, &plan)...)
	if resp.Diagnostics.HasError() {
		return
	}
	r.upsert(ctx, plan, &resp.Diagnostics, &resp.State)
}

func (r *zoneResource) Update(ctx context.Context, req resource.UpdateRequest, resp *resource.UpdateResponse) {
	var plan zoneModel
	resp.Diagnostics.Append(req.Plan.Get(ctx, &plan)...)
	if resp.Diagnostics.HasError() {
		return
	}
	r.upsert(ctx, plan, &resp.Diagnostics, &resp.State)
}

func (r *zoneResource) upsert(ctx context.Context, plan zoneModel, diags *diag.Diagnostics, state *tfsdk.State) {
	body := zoneAPI{
		Name:    plan.Name.ValueString(),
		Type:    plan.Type.ValueString(),
		Subnets: listToStrings(ctx, plan.Subnets, diags),
		Parent:  plan.Parent.ValueString(),
	}
	if diags.HasError() {
		return
	}
	var out zoneAPI
	if err := r.client.put(ctx, "/api/v1/zones/"+pathEscape(body.Name), body, &out); err != nil {
		diags.AddError("upsert zone failed", err.Error())
		return
	}
	diags.Append(state.Set(ctx, r.toModel(ctx, out, diags))...)
}

func (r *zoneResource) Read(ctx context.Context, req resource.ReadRequest, resp *resource.ReadResponse) {
	var state zoneModel
	resp.Diagnostics.Append(req.State.Get(ctx, &state)...)
	if resp.Diagnostics.HasError() {
		return
	}
	var out zoneAPI
	if err := r.client.get(ctx, "/api/v1/zones/"+pathEscape(state.Name.ValueString()), &out); err != nil {
		if isNotFound(err) {
			resp.State.RemoveResource(ctx)
			return
		}
		resp.Diagnostics.AddError("read zone failed", err.Error())
		return
	}
	resp.Diagnostics.Append(resp.State.Set(ctx, r.toModel(ctx, out, &resp.Diagnostics))...)
}

func (r *zoneResource) Delete(ctx context.Context, req resource.DeleteRequest, resp *resource.DeleteResponse) {
	var state zoneModel
	resp.Diagnostics.Append(req.State.Get(ctx, &state)...)
	if resp.Diagnostics.HasError() {
		return
	}
	if err := r.client.del(ctx, "/api/v1/zones/"+pathEscape(state.Name.ValueString())); err != nil && !isNotFound(err) {
		resp.Diagnostics.AddError("delete zone failed", err.Error())
	}
}

func (r *zoneResource) ImportState(ctx context.Context, req resource.ImportStateRequest, resp *resource.ImportStateResponse) {
	resource.ImportStatePassthroughID(ctx, path.Root("name"), req, resp)
}

func (r *zoneResource) toModel(ctx context.Context, api zoneAPI, diags *diag.Diagnostics) zoneModel {
	m := zoneModel{
		Name:    types.StringValue(api.Name),
		Type:    types.StringValue(api.Type),
		Subnets: stringsToList(ctx, api.Subnets, diags),
	}
	if api.Parent == "" {
		m.Parent = types.StringNull()
	} else {
		m.Parent = types.StringValue(api.Parent)
	}
	return m
}