schema_cluster.go

package argocd

import (
	"github.com/hashicorp/terraform-plugin-sdk/helper/schema"
)

func clusterSchema() map[string]*schema.Schema {
	return map[string]*schema.Schema{
		"name": {
			Type:        schema.TypeString,
			Description: "Name of the cluster. If omitted, will use the server address",
			Optional:    true,
		},
		"server": {
			Type:        schema.TypeString,
			Description: "Server is the API server URL of the Kubernetes cluster",
			Optional:    true,
		},
		"shard": {
			Type:        schema.TypeString,
			Description: "Shard contains optional shard number. Calculated on the fly by the application controller if not specified.",
			Optional:    true,
		},
		"namespaces": {
			Type:        schema.TypeList,
			Description: "Holds list of namespaces which are accessible in that cluster. Cluster level resources would be ignored if namespace list is not empty.",
			Optional:    true,
			Elem: &schema.Schema{
				Type: schema.TypeString,
			},
		},
		"config": {
			Type:     schema.TypeList,
			Required: true,
			MinItems: 1,
			MaxItems: 1,
			Elem: &schema.Resource{
				Schema: map[string]*schema.Schema{
					"aws_auth_config": {
						Type:     schema.TypeList,
						Optional: true,
						Elem: &schema.Resource{
							Schema: map[string]*schema.Schema{
								"cluster_name": {
									Type:     schema.TypeString,
									Optional: true,
								},
								"role_arn": {
									Type:        schema.TypeString,
									Optional:    true,
									Description: "RoleARN contains optional role ARN. If set then AWS IAM Authenticator assume a role to perform cluster operations instead of the default AWS credential provider chain",
								},
							},
						},
					},
					"bearer_token": {
						Type:        schema.TypeString,
						Description: "Server requires Bearer authentication. This client will not attempt to use refresh tokens for an OAuth2 flow.",
						Optional:    true,
						Sensitive:   true,
					},
					"exec_provider_config": {
						Type:        schema.TypeList,
						Optional:    true,
						MaxItems:    1,
						Description: "exec_provider_config is config used to call an external command to perform cluster authentication See: https://godoc.org/k8s.io/client-go/tools/clientcmd/api#ExecConfig",
						Elem: &schema.Resource{
							Schema: map[string]*schema.Schema{
								"api_version": {
									Type:        schema.TypeString,
									Optional:    true,
									Description: "Preferred input version of the ExecInfo",
								},
								"args": {
									Type:        schema.TypeList,
									Optional:    true,
									Description: "Arguments to pass to the command when executing it",
									Elem:        schema.TypeString,
								},
								"command": {
									Type:        schema.TypeString,
									Optional:    true,
									Description: "Command to execute",
								},
								"env": {
									Type:        schema.TypeMap,
									Optional:    true,
									Description: "Env defines additional environment variables to expose to the process. Passed as a map of strings",
									Elem:        schema.TypeString,
								},
								"install_hint": {
									Type:        schema.TypeString,
									Description: "This text is shown to the user when the executable doesn't seem to be present",
									Optional:    true,
								},
							},
						},
					},
					"tls_client_config": {
						Type:     schema.TypeList,
						MaxItems: 1,
						Optional: true,
						Elem: &schema.Resource{
							Schema: map[string]*schema.Schema{
								"ca_data": {
									Type:        schema.TypeString,
									Optional:    true,
									Description: "ca_data holds PEM-encoded bytes (typically read from a root certificates bundle)",
								},
								"cert_data": {
									Type:        schema.TypeString,
									Optional:    true,
									Description: "cert_data holds PEM-encoded bytes (typically read from a client certificate file).",
								},
								"insecure": {
									Type:        schema.TypeBool,
									Optional:    true,
									Description: "Server should be accessed without verifying the TLS certificate.",
								},
								"key_data": {
									Type:        schema.TypeString,
									Optional:    true,
									Sensitive:   true,
									Description: "key_data holds PEM-encoded bytes (typically read from a client certificate key file).",
								},
								"server_name": {
									Type:        schema.TypeString,
									Optional:    true,
									Description: "ServerName is passed to the server for SNI and is used in the client to check server certificates against. If ServerName is empty, the hostname used to contact the server is used.",
								},
							},
						},
					},
					"username": {
						Type:        schema.TypeString,
						Optional:    true,
						Description: "Server requires Basic authentication",
					},
					"password": {
						Type:        schema.TypeString,
						Description: "Server requires Basic authentication",
						Optional:    true,
						Sensitive:   true,
					},
				},
			},
		},
		"info": {
			Type:     schema.TypeList,
			Computed: true,
			Elem: &schema.Resource{
				Schema: map[string]*schema.Schema{
					"server_version": {
						Type:     schema.TypeString,
						Computed: true,
					},
					"applications_count": {
						Type:     schema.TypeString,
						Computed: true,
					},
					"connection_state": {
						Type:     schema.TypeList,
						Computed: true,
						MaxItems: 1,
						Elem: &schema.Resource{
							Schema: map[string]*schema.Schema{
								"message": {
									Type:     schema.TypeString,
									Computed: true,
								},
								"status": {
									Type:     schema.TypeString,
									Computed: true,
								},
							},
						},
					},
				},
			},
		},
	}
}