benvin
3913b3920d
Terraform provider (plugin-framework) for the tomswall fleet control plane. Resources: zone, address_group (static/dns/asn, with computed resolved prefixes), portgroup, fabric, device, binding (device:zone), and rule. Each resource does full CRUD against the tomswallapi HTTP API with bearer-token auth and ImportState support; rules recreate on update since the rules API is create/delete only. Includes Makefile with make patch|minor|major release tags, Woodpecker pre-commit/build/test/release pipelines (release publishes to the artifactapi terraform registry), README, and a worked example.
91 lines
2.2 KiB
Go
91 lines
2.2 KiB
Go
package provider
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"net/url"
|
|
)
|
|
|
|
type apiClient struct {
|
|
baseURL string
|
|
token string
|
|
httpClient *http.Client
|
|
}
|
|
|
|
func newAPIClient(baseURL, token string) *apiClient {
|
|
return &apiClient{baseURL: baseURL, token: token, httpClient: &http.Client{}}
|
|
}
|
|
|
|
func (c *apiClient) get(ctx context.Context, path string, out any) error {
|
|
return c.do(ctx, http.MethodGet, path, nil, out)
|
|
}
|
|
|
|
func (c *apiClient) put(ctx context.Context, path string, body, out any) error {
|
|
return c.do(ctx, http.MethodPut, path, body, out)
|
|
}
|
|
|
|
func (c *apiClient) post(ctx context.Context, path string, body, out any) error {
|
|
return c.do(ctx, http.MethodPost, path, body, out)
|
|
}
|
|
|
|
func (c *apiClient) del(ctx context.Context, path string) error {
|
|
return c.do(ctx, http.MethodDelete, path, nil, nil)
|
|
}
|
|
|
|
func (c *apiClient) do(ctx context.Context, method, path string, body, out any) error {
|
|
var bodyReader io.Reader
|
|
if body != nil {
|
|
b, err := json.Marshal(body)
|
|
if err != nil {
|
|
return fmt.Errorf("marshal request: %w", err)
|
|
}
|
|
bodyReader = bytes.NewReader(b)
|
|
}
|
|
|
|
req, err := http.NewRequestWithContext(ctx, method, c.baseURL+path, bodyReader)
|
|
if err != nil {
|
|
return fmt.Errorf("create request: %w", err)
|
|
}
|
|
if body != nil {
|
|
req.Header.Set("Content-Type", "application/json")
|
|
}
|
|
if c.token != "" {
|
|
req.Header.Set("Authorization", "Bearer "+c.token)
|
|
}
|
|
|
|
resp, err := c.httpClient.Do(req)
|
|
if err != nil {
|
|
return fmt.Errorf("http request: %w", err)
|
|
}
|
|
defer resp.Body.Close()
|
|
|
|
if resp.StatusCode == http.StatusNotFound {
|
|
return ¬FoundError{path: path}
|
|
}
|
|
if resp.StatusCode >= 400 {
|
|
b, _ := io.ReadAll(resp.Body)
|
|
return fmt.Errorf("api error %d: %s", resp.StatusCode, string(b))
|
|
}
|
|
if out != nil && resp.StatusCode != http.StatusNoContent {
|
|
if err := json.NewDecoder(resp.Body).Decode(out); err != nil {
|
|
return fmt.Errorf("decode response: %w", err)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func pathEscape(s string) string { return url.PathEscape(s) }
|
|
|
|
type notFoundError struct{ path string }
|
|
|
|
func (e *notFoundError) Error() string { return fmt.Sprintf("not found: %s", e.path) }
|
|
|
|
func isNotFound(err error) bool {
|
|
_, ok := err.(*notFoundError)
|
|
return ok
|
|
}
|