data_source_alicloud_security_group_rules.go

package alicloud

import (
	"fmt"
	"strings"

	"strconv"

	"github.com/aliyun/alibaba-cloud-sdk-go/services/ecs"
	"github.com/hashicorp/terraform/helper/schema"
)

func dataSourceAlicloudSecurityGroupRules() *schema.Resource {
	return &schema.Resource{
		Read: dataSourceAlicloudSecurityGroupRulesRead,

		Schema: map[string]*schema.Schema{
			"group_id": {
				Type:     schema.TypeString,
				Required: true,
			},
			"nic_type": {
				Type:         schema.TypeString,
				Optional:     true,
				ValidateFunc: validateSecurityRuleNicType,
			},
			"direction": {
				Type:         schema.TypeString,
				Optional:     true,
				ValidateFunc: validateSecurityRuleType,
			},
			"ip_protocol": {
				Type:         schema.TypeString,
				Optional:     true,
				ValidateFunc: validateSecurityRuleIpProtocol,
			},
			"policy": {
				Type:         schema.TypeString,
				Optional:     true,
				ValidateFunc: validateSecurityRulePolicy,
			},
			"rules": {
				Type:     schema.TypeList,
				Computed: true,
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{
						"ip_protocol": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"port_range": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"source_cidr_ip": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"source_group_id": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"source_group_owner_account": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"dest_cidr_ip": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"dest_group_id": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"dest_group_owner_account": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"policy": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"nic_type": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"priority": {
							Type:     schema.TypeInt,
							Computed: true,
						},
						"direction": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"description": {
							Type:     schema.TypeString,
							Computed: true,
						},
					},
				},
			},
			"group_name": {
				Type:     schema.TypeString,
				Computed: true,
			},
			"group_desc": {
				Type:     schema.TypeString,
				Computed: true,
			},
			"output_file": {
				Type:     schema.TypeString,
				Optional: true,
			},
		},
	}
}

func dataSourceAlicloudSecurityGroupRulesRead(d *schema.ResourceData, meta interface{}) error {
	conn := meta.(*AliyunClient).ecsconn

	req := ecs.CreateDescribeSecurityGroupAttributeRequest()
	req.SecurityGroupId = d.Get("group_id").(string)
	req.NicType = d.Get("nic_type").(string)
	req.Direction = d.Get("direction").(string)
	attr, err := conn.DescribeSecurityGroupAttribute(req)
	if err != nil {
		return fmt.Errorf("DescribeSecurityGroupAttribute got an error: %#v", err)
	}

	var rules []map[string]interface{}

	if attr == nil {
		return fmt.Errorf("There is no any rule in the security group %s. Please change your search criteria and try again.", req.SecurityGroupId)
	}
	for _, item := range attr.Permissions.Permission {
		if v, ok := d.GetOk("ip_protocol"); ok && strings.ToLower(string(item.IpProtocol)) != v.(string) {
			continue
		}

		if v, ok := d.GetOk("policy"); ok && strings.ToLower(string(item.Policy)) != v.(string) {
			continue
		}

		mapping := map[string]interface{}{
			"ip_protocol":                strings.ToLower(string(item.IpProtocol)),
			"port_range":                 item.PortRange,
			"source_cidr_ip":             item.SourceCidrIp,
			"source_group_id":            item.SourceGroupId,
			"source_group_owner_account": item.SourceGroupOwnerAccount,
			"dest_cidr_ip":               item.DestCidrIp,
			"dest_group_id":              item.DestGroupId,
			"dest_group_owner_account":   item.DestGroupOwnerAccount,
			"policy":                     strings.ToLower(string(item.Policy)),
			"nic_type":                   item.NicType,
			"direction":                  item.Direction,
			"description":                item.Description,
		}

		if pri, err := strconv.Atoi(item.Priority); err != nil {
			return fmt.Errorf("Converting rule priority %s got an error: %#v.", item.Priority, err)
		} else {
			mapping["priority"] = pri
		}
		rules = append(rules, mapping)
	}

	d.SetId(attr.SecurityGroupId)

	if err := d.Set("group_name", attr.SecurityGroupName); err != nil {
		return err
	}

	if err := d.Set("group_desc", attr.Description); err != nil {
		return err
	}

	if err := d.Set("rules", rules); err != nil {
		return err
	}

	if output, ok := d.GetOk("output_file"); ok && output.(string) != "" {
		writeToFile(output.(string), rules)
	}
	return nil
}