tailscale: add overwrite_existing_content option to resource_acl (#303

)

So it doesn't need to be imported first.

Fixes #229

docs/resources/acl.md

@@ -36,6 +36,10 @@ resource "tailscale_acl" "sample_acl" {
 
 - `acl` (String) The JSON-based policy that defines which devices and users are allowed to connect in your network
 
+### Optional
+
+- `overwrite_existing_content` (Boolean) If true, will skip requirement to import acl before allowing changes. Be careful, can cause ACL to be overwritten
+
 ### Read-Only
 
 - `id` (String) The ID of this resource.

tailscale/resource_acl.go

@@ -40,6 +40,11 @@ func resourceACL() *schema.Resource {
 				ValidateDiagFunc: validateACL,
 				Description:      "The JSON-based policy that defines which devices and users are allowed to connect in your network",
 			},
+			"overwrite_existing_content": {
+				Type:        schema.TypeBool,
+				Optional:    true,
+				Description: "If true, will skip requirement to import acl before allowing changes. Be careful, can cause ACL to be overwritten",
+			},
 		},
 	}
 }
@@ -99,7 +104,12 @@ func resourceACLCreate(ctx context.Context, d *schema.ResourceData, m interface{
 
 	// Setting the `ts-default` ETag will make this operation succeed only if
 	// ACL contents has never been changed from its default value.
-	if err := client.SetACL(ctx, acl, tailscale.WithETag("ts-default")); err != nil {
+	var opts []tailscale.SetACLOption
+	if !d.Get("overwrite_existing_content").(bool) {
+		opts = append(opts, tailscale.WithETag("ts-default"))
+	}
+
+	if err := client.SetACL(ctx, acl, opts...); err != nil {
 		if strings.HasSuffix(err.Error(), "(412)") {
 			err = fmt.Errorf(
 				"! You seem to be trying to overwrite a non-default ACL with a tailscale_acl resource.\n"+