schema_kubernetes_cluster_deployment_target.go

package octopusdeploy

import (
	"context"
	"fmt"
	"net/url"

	"github.com/OctopusDeploy/go-octopusdeploy/v2/pkg/machines"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
)

func expandKubernetesClusterDeploymentTarget(d *schema.ResourceData) *machines.DeploymentTarget {
	clusterURL, _ := url.Parse(d.Get("cluster_url").(string))

	endpoint := machines.NewKubernetesEndpoint(clusterURL)

	if v, ok := d.GetOk("authentication"); ok {
		endpoint.Authentication = expandKubernetesStandardAuthentication(v)
	}

	if v, ok := d.GetOk("pod_authentication"); ok {
		endpoint.Authentication = expandKubernetesPodAuthentication(v)
	}

	if v, ok := d.GetOk("aws_account_authentication"); ok {
		endpoint.Authentication = expandKubernetesAwsAuthentication(v)
	}

	if v, ok := d.GetOk("azure_service_principal_authentication"); ok {
		endpoint.Authentication = expandKubernetesAzureAuthentication(v)
	}

	if v, ok := d.GetOk("certificate_authentication"); ok {
		endpoint.Authentication = expandKubernetesCertificateAuthentication(v)
	}

	if v, ok := d.GetOk("cluster_certificate"); ok {
		endpoint.ClusterCertificate = v.(string)
	}

	if v, ok := d.GetOk("cluster_certificate_path"); ok {
		endpoint.ClusterCertificatePath = v.(string)
	}

	if v, ok := d.GetOk("container"); ok {
		endpoint.Container = expandContainer(v)
	}

	if v, ok := d.GetOk("container_options"); ok {
		endpoint.ContainerOptions = v.(string)
	}

	if v, ok := d.GetOk("default_worker_pool_id"); ok {
		endpoint.DefaultWorkerPoolID = v.(string)
	}

	if v, ok := d.GetOk("gcp_account_authentication"); ok {
		endpoint.Authentication = expandKubernetesGcpAuthentication(v)
	}

	if v, ok := d.GetOk("namespace"); ok {
		endpoint.Namespace = v.(string)
	}

	if v, ok := d.GetOk("proxy_id"); ok {
		endpoint.ProxyID = v.(string)
	}

	if v, ok := d.GetOk("running_in_container"); ok {
		endpoint.RunningInContainer = v.(bool)
	}

	if v, ok := d.GetOk("skip_tls_verification"); ok {
		endpoint.SkipTLSVerification = v.(bool)
	}

	deploymentTarget := expandDeploymentTarget(d)
	deploymentTarget.Endpoint = endpoint
	return deploymentTarget
}

func flattenKubernetesClusterDeploymentTarget(deploymentTarget *machines.DeploymentTarget) map[string]interface{} {
	if deploymentTarget == nil {
		return nil
	}

	flattenedDeploymentTarget := flattenDeploymentTarget(deploymentTarget)
	endpointResource, _ := machines.ToEndpointResource(deploymentTarget.Endpoint)

	flattenedDeploymentTarget["cluster_certificate"] = endpointResource.ClusterCertificate
	flattenedDeploymentTarget["cluster_certificate_path"] = endpointResource.ClusterCertificatePath
	flattenedDeploymentTarget["container"] = flattenContainer(endpointResource.Container)
	flattenedDeploymentTarget["container_options"] = endpointResource.ContainerOptions
	flattenedDeploymentTarget["default_worker_pool_id"] = endpointResource.DefaultWorkerPoolID
	flattenedDeploymentTarget["namespace"] = endpointResource.Namespace
	flattenedDeploymentTarget["proxy_id"] = endpointResource.ProxyID
	flattenedDeploymentTarget["running_in_container"] = endpointResource.RunningInContainer
	flattenedDeploymentTarget["skip_tls_verification"] = endpointResource.SkipTLSVerification

	if endpointResource.ClusterURL != nil {
		flattenedDeploymentTarget["cluster_url"] = endpointResource.ClusterURL.String()
	}

	switch endpointResource.Authentication.GetAuthenticationType() {
	case "KubernetesAws":
		flattenedDeploymentTarget["aws_account_authentication"] = flattenKubernetesAwsAuthentication(endpointResource.Authentication.(*machines.KubernetesAwsAuthentication))
	case "KubernetesAzure":
		flattenedDeploymentTarget["azure_service_principal_authentication"] = flattenKubernetesAzureAuthentication(endpointResource.Authentication.(*machines.KubernetesAzureAuthentication))
	case "KubernetesCertificate":
		flattenedDeploymentTarget["certificate_authentication"] = flattenKubernetesCertificateAuthentication(endpointResource.Authentication.(*machines.KubernetesCertificateAuthentication))
	case "KubernetesGoogleCloud":
		flattenedDeploymentTarget["gcp_account_authentication"] = flattenKubernetesGcpAuthentication(endpointResource.Authentication.(*machines.KubernetesGcpAuthentication))
	case "KubernetesStandard":
		flattenedDeploymentTarget["authentication"] = flattenKubernetesStandardAuthentication(endpointResource.Authentication.(*machines.KubernetesStandardAuthentication))
	case "KubernetesPodService":
		flattenedDeploymentTarget["pod_authentication"] = flattenKubernetesPodAuthentication(endpointResource.Authentication.(*machines.KubernetesPodAuthentication))
	case "None":
		flattenedDeploymentTarget["authentication"] = flattenKubernetesStandardAuthentication(endpointResource.Authentication.(*machines.KubernetesStandardAuthentication))
	}

	return flattenedDeploymentTarget
}

func getKubernetesClusterDeploymentTargetDataSchema() map[string]*schema.Schema {
	dataSchema := getKubernetesClusterDeploymentTargetSchema()
	setDataSchema(&dataSchema)

	deploymentTargetDataSchema := getDeploymentTargetDataSchema()

	deploymentTargetDataSchema["kubernetes_cluster_deployment_targets"] = &schema.Schema{
		Computed:    true,
		Description: "A list of Kubernetes cluster deployment targets that match the filter(s).",
		Elem:        &schema.Resource{Schema: dataSchema},
		Optional:    true,
		Type:        schema.TypeList,
	}

	delete(deploymentTargetDataSchema, "communication_styles")
	delete(deploymentTargetDataSchema, "deployment_targets")
	deploymentTargetDataSchema["id"] = getDataSchemaID()

	return deploymentTargetDataSchema
}

func getKubernetesClusterDeploymentTargetSchema() map[string]*schema.Schema {
	kubernetesClusterDeploymentTargetSchema := getDeploymentTargetSchema()

	kubernetesClusterDeploymentTargetSchema["authentication"] = &schema.Schema{
		Computed:     true,
		Elem:         &schema.Resource{Schema: getKubernetesStandardAuthenticationSchema()},
		ExactlyOneOf: []string{"pod_authentication", "authentication", "aws_account_authentication", "azure_service_principal_authentication", "certificate_authentication", "gcp_account_authentication"},
		MaxItems:     1,
		MinItems:     0,
		Optional:     true,
		Type:         schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["pod_authentication"] = &schema.Schema{
		Computed:     true,
		Elem:         &schema.Resource{Schema: getKubernetesPodAuthenticationSchema()},
		ExactlyOneOf: []string{"pod_authentication", "authentication", "aws_account_authentication", "azure_service_principal_authentication", "certificate_authentication", "gcp_account_authentication"},
		MaxItems:     1,
		MinItems:     0,
		Optional:     true,
		Type:         schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["aws_account_authentication"] = &schema.Schema{
		Computed:     true,
		Elem:         &schema.Resource{Schema: getKubernetesAwsAuthenticationSchema()},
		ExactlyOneOf: []string{"pod_authentication", "authentication", "aws_account_authentication", "azure_service_principal_authentication", "certificate_authentication", "gcp_account_authentication"},
		MaxItems:     1,
		MinItems:     0,
		Optional:     true,
		Type:         schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["azure_service_principal_authentication"] = &schema.Schema{
		Computed:     true,
		Elem:         &schema.Resource{Schema: getKubernetesAzureAuthenticationSchema()},
		ExactlyOneOf: []string{"pod_authentication", "authentication", "aws_account_authentication", "azure_service_principal_authentication", "certificate_authentication", "gcp_account_authentication"},
		MaxItems:     1,
		MinItems:     0,
		Optional:     true,
		Type:         schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["certificate_authentication"] = &schema.Schema{
		Computed:     true,
		Elem:         &schema.Resource{Schema: getKubernetesCertificateAuthenticationSchema()},
		ExactlyOneOf: []string{"pod_authentication", "authentication", "aws_account_authentication", "azure_service_principal_authentication", "certificate_authentication", "gcp_account_authentication"},
		MaxItems:     1,
		MinItems:     0,
		Optional:     true,
		Type:         schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["cluster_certificate"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["cluster_certificate_path"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["cluster_url"] = &schema.Schema{
		Required: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["container"] = &schema.Schema{
		Computed: true,
		Elem:     &schema.Resource{Schema: getDeploymentActionContainerSchema()},
		Optional: true,
		Type:     schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["container_options"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["default_worker_pool_id"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["gcp_account_authentication"] = &schema.Schema{
		Computed:     true,
		Elem:         &schema.Resource{Schema: getKubernetesGcpAuthenticationSchema()},
		ExactlyOneOf: []string{"pod_authentication", "authentication", "aws_account_authentication", "azure_service_principal_authentication", "certificate_authentication", "gcp_account_authentication"},
		MaxItems:     1,
		MinItems:     0,
		Optional:     true,
		Type:         schema.TypeList,
	}

	kubernetesClusterDeploymentTargetSchema["namespace"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["proxy_id"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeString,
	}

	kubernetesClusterDeploymentTargetSchema["running_in_container"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeBool,
	}

	kubernetesClusterDeploymentTargetSchema["skip_tls_verification"] = &schema.Schema{
		Optional: true,
		Type:     schema.TypeBool,
	}

	return kubernetesClusterDeploymentTargetSchema
}

func setKubernetesClusterDeploymentTarget(ctx context.Context, d *schema.ResourceData, deploymentTarget *machines.DeploymentTarget) error {
	endpointResource, err := machines.ToEndpointResource(deploymentTarget.Endpoint)
	if err != nil {
		return err
	}

	d.Set("cluster_certificate", endpointResource.ClusterCertificate)
	d.Set("cluster_certificate_path", endpointResource.ClusterCertificatePath)

	if err := d.Set("container", flattenContainer(endpointResource.Container)); err != nil {
		return fmt.Errorf("error setting container: %s", err)
	}

	d.Set("default_worker_pool_id", endpointResource.DefaultWorkerPoolID)
	d.Set("namespace", endpointResource.Namespace)
	d.Set("proxy_id", endpointResource.ProxyID)
	d.Set("running_in_container", endpointResource.RunningInContainer)
	d.Set("skip_tls_verification", endpointResource.SkipTLSVerification)
	d.Set("container_options", endpointResource.ContainerOptions)

	if endpointResource.ClusterURL != nil {
		d.Set("cluster_url", endpointResource.ClusterURL.String())
	}

	switch endpointResource.Authentication.GetAuthenticationType() {
	case "KubernetesAws":
		if err := d.Set("aws_account_authentication", flattenKubernetesAwsAuthentication(endpointResource.Authentication.(*machines.KubernetesAwsAuthentication))); err != nil {
			return fmt.Errorf("error setting aws_account_authentication: %s", err)
		}
	case "KubernetesAzure":
		if err := d.Set("azure_service_principal_authentication", flattenKubernetesAzureAuthentication(endpointResource.Authentication.(*machines.KubernetesAzureAuthentication))); err != nil {
			return fmt.Errorf("error setting azure_service_principal_authentication: %s", err)
		}
	case "KubernetesCertificate":
		if err := d.Set("certificate_authentication", flattenKubernetesCertificateAuthentication(endpointResource.Authentication.(*machines.KubernetesCertificateAuthentication))); err != nil {
			return fmt.Errorf("error setting certificate_authentication: %s", err)
		}
	case "KubernetesGoogleCloud":
		if err := d.Set("gcp_account_authentication", flattenKubernetesGcpAuthentication(endpointResource.Authentication.(*machines.KubernetesGcpAuthentication))); err != nil {
			return fmt.Errorf("error setting gcp_account_authentication: %s", err)
		}
	case "KubernetesStandard":
		if err := d.Set("authentication", flattenKubernetesStandardAuthentication(endpointResource.Authentication.(*machines.KubernetesStandardAuthentication))); err != nil {
			return fmt.Errorf("error setting authentication: %s", err)
		}
	case "KubernetesPodService":
		if err := d.Set("pod_authentication", flattenKubernetesPodAuthentication(endpointResource.Authentication.(*machines.KubernetesPodAuthentication))); err != nil {
			return fmt.Errorf("error setting authentication: %s", err)
		}
	case "None":
		if err := d.Set("authentication", flattenKubernetesStandardAuthentication(endpointResource.Authentication.(*machines.KubernetesStandardAuthentication))); err != nil {
			return fmt.Errorf("error setting authentication: %s", err)
		}
	}

	return setDeploymentTarget(ctx, d, deploymentTarget)
}