.copywrite.hcl

@@ -0,0 +1,24 @@
+# NOTE: This file is for HashiCorp specific licensing automation and can be deleted after creating a new repo with this template.
+schema_version = 1
+
+project {
+  license        = "Apache-2.0"
+  copyright_year = 2025
+
+  header_ignore = [
+    # internal catalog metadata (prose)
+    "META.d/**/*.yaml",
+
+    # examples used within documentation (prose)
+    "examples/**",
+
+    # GitHub issue template configuration
+    ".github/ISSUE_TEMPLATE/*.yml",
+
+    # golangci-lint tooling configuration
+    ".golangci.yml",
+
+    # GoReleaser tooling configuration
+    ".goreleaser.yml",
+  ]
+}

.github/actions/acc_test/README.md

@@ -1 +0,0 @@
-# acceptance test action

.github/actions/acc_test/action.yaml

@@ -1,262 +0,0 @@
-name: Acceptance Testing
-description: "Acceptance Testing pipeline"
-
-inputs:
-  test_timeout_string:
-    description: "string that determines the timeout (default: 45m)"
-    default: '45m'
-    required: true
-
-  go-version:
-    description: "go version to install"
-    default: '1.25'
-    required: true
-
-  project_id:
-    description: "STACKIT project ID for tests"
-    required: true
-
-  project_user_email:
-    required: true
-    description: "project user email for acc testing"
-
-  tf_acc_kek_key_id:
-    description: "KEK key ID"
-    required: true
-
-  tf_acc_kek_key_ring_id:
-    description: "KEK key ring ID"
-    required: true
-
-  tf_acc_kek_key_version:
-    description: "KEK key version"
-    required: true
-
-  tf_acc_kek_service_account:
-    description: "KEK service account email"
-    required: true
-
-  region:
-    description: "STACKIT region for tests"
-    default: 'eu01'
-    required: true
-
-  service_account_json_content:
-    description: "STACKIT service account JSON file contents"
-    required: true
-    default: ""
-
-  service_account_json_content_b64:
-    description: "STACKIT service account JSON file contents"
-    required: true
-    default: ""
-
-  service_account_json_file_path:
-    description: "STACKIT service account JSON file contents"
-    required: true
-    default: 'service_account.json'
-
-  test_file:
-    description: "testfile to run"
-    default: ''
-
-
-#outputs:
-#  random-number:
-#    description: "Random number"
-#    value: ${{ steps.random-number-generator.outputs.random-number }}
-
-runs:
-  using: "composite"
-  steps:
-#    - name: Random Number Generator
-#      id: random-number-generator
-#      run: echo "random-number=$(echo $RANDOM)" >> $GITHUB_OUTPUT
-#      shell: bash
-
-    - name: Install needed tools
-      shell: bash
-      run: |
-        echo "::group::apt install"
-        set -e
-        apt-get -y -qq update >apt_update.log 2>apt_update_err.log
-        if [ $? -ne 0 ]; then
-          cat apt_update.log apt_update_err.log
-        fi
-        apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget >apt_get.log 2>apt_get_err.log
-        if [ $? -ne 0 ]; then
-          cat apt_get.log apt_get_err.log
-        fi
-        echo "::endgroup::"
-
-    - name: Setup JAVA
-      uses: actions/setup-java@v5
-      with:
-        distribution: 'temurin' # See 'Supported distributions' for available options
-        java-version: '21'
-
-    - name: Install Go ${{ inputs.go-version }}
-      uses: actions/setup-go@v6
-      with:
-        # go-version: ${{ inputs.go-version }}
-        check-latest: true
-        go-version-file: 'go.mod'
-
-    - name: Determine GOMODCACHE
-      shell: bash
-      id: goenv
-      run: |
-        set -e
-        echo "gomodcache=$(go env GOMODCACHE)" >> "$GITHUB_OUTPUT"
-
-    - name: Restore cached GO pkg
-      id: cache-gopkg
-      uses: actions/cache/restore@v5
-      with:
-        path: "${{ steps.goenv.outputs.gomodcache }}"
-        key: ${{ runner.os }}-gopkg
-
-    - name: Install go tools
-      if: steps.cache-gopkg.outputs.cache-hit != 'true'
-      shell: bash
-      run: |
-        echo "::group::go install"
-        set -e
-        go mod download
-        go install golang.org/x/tools/cmd/goimports@latest
-        go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-        go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-        go install github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs@latest
-        go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest
-        echo "::endgroup::"
-    - name: Run go mod tidy
-      shell: bash
-      run: go mod tidy
-
-    - name: Save GO package Cache
-      id: cache-gopkg-save
-      uses: actions/cache/save@v5
-      with:
-        path: |
-          ${{ steps.goenv.outputs.gomodcache }}
-        key: ${{ runner.os }}-gopkg
-
-    - name: Creating service_account file from json input
-      if: inputs.service_account_json_content != ''
-      shell: bash
-      run: |
-        echo "::group::create service account file"
-        set -e
-        set -o pipefail
-
-        jsonFile="${{ inputs.service_account_json_file_path }}"
-        jsonFile="${jsonFile:-x}"
-        if [ "${jsonFile}" == "x" ]; then
-          echo "no service account file path provided"
-          exit 1
-        fi
-        
-        if [ ! -f "${jsonFile}" ]; then
-          echo "creating service account file '${{ inputs.service_account_json_file_path }}'"
-          echo "${{ inputs.service_account_json_content }}" > stackit/"${{ inputs.service_account_json_file_path }}"
-        fi
-        ls -l stackit/"${{ inputs.service_account_json_file_path }}"
-        echo "::endgroup::"
-
-    - name: Creating service_account file from base64 json input
-      if: inputs.service_account_json_content_b64 != ''
-      shell: bash
-      run: |
-        echo "::group::create service account file"
-        set -e
-        set -o pipefail
-
-        jsonFile="${{ inputs.service_account_json_file_path }}"
-        jsonFile="${jsonFile:-x}"
-        if [ "${jsonFile}" == "x" ]; then
-          echo "no service account file path provided"
-          exit 1
-        fi
-        
-        if [ ! -f "${jsonFile}" ]; then
-          echo "creating service account file '${{ inputs.service_account_json_file_path }}'"
-          echo "${{ inputs.service_account_json_content_b64 }}" | base64 -d > stackit/"${{ inputs.service_account_json_file_path }}"
-        fi
-        ls -l stackit/"${{ inputs.service_account_json_file_path }}"
-        echo "::endgroup::"
-
-    - name: Run acceptance test file
-      if: ${{ inputs.test_file != '' }}
-      shell: bash
-      run: |
-        echo "::group::go test file"
-        set -e 
-        set -o pipefail
-
-        echo "Running acceptance tests for the terraform provider"
-        cd stackit || exit 1
-        TF_ACC=1 \
-        TF_ACC_PROJECT_ID=${TF_ACC_PROJECT_ID} \
-        TF_ACC_REGION=${TF_ACC_REGION} \
-        TF_ACC_TEST_PROJECT_USER_EMAIL=${TF_ACC_TEST_PROJECT_USER_EMAIL} \
-        TF_ACC_SERVICE_ACCOUNT_FILE="${PWD}/${{ inputs.service_account_json_file_path }}" \
-        TF_ACC_KEK_KEY_ID=${TF_ACC_KEK_KEY_ID} \
-        TF_ACC_KEK_KEY_RING_ID=${TF_ACC_KEK_KEY_RING_ID} \
-        TF_ACC_KEK_KEY_VERSION=${TF_ACC_KEK_KEY_VERSION} \
-        TF_ACC_KEK_SERVICE_ACCOUNT=${TF_ACC_KEK_SERVICE_ACCOUNT} \
-        go test ${{ inputs.test_file }} -count=1 -timeout=${{ inputs.test_timeout_string }}
-        echo "::endgroup::"
-      env:
-        TF_ACC_PROJECT_ID: ${{ inputs.project_id }}
-        TF_ACC_REGION: ${{ inputs.region }}
-        TF_ACC_TEST_PROJECT_USER_EMAIL: ${{ inputs.project_user_email }}
-        TF_ACC_KEK_KEY_ID: ${{ inputs.tf_acc_kek_key_id }}
-        TF_ACC_KEK_KEY_RING_ID: ${{ inputs.tf_acc_kek_key_ring_id }}
-        TF_ACC_KEK_KEY_VERSION: ${{ inputs.tf_acc_kek_key_version }}
-        TF_ACC_KEK_SERVICE_ACCOUNT: ${{ inputs.tf_acc_kek_service_account }}
-
-#    - name: Run test action
-#      if: ${{ inputs.test_file == '' }}
-#      env:
-#        TF_ACC: 1
-#        TF_ACC_PROJECT_ID: ${{ inputs.project_id }}
-#        TF_ACC_REGION: ${{ inputs.region }}
-#        TF_ACC_TEST_PROJECT_USER_EMAIL: ${{ inputs.project_user_email }}
-#        TF_ACC_KEK_KEY_ID: ${{ inputs.tf_acc_kek_key_id }}
-#        TF_ACC_KEK_KEY_RING_ID: ${{ inputs.tf_acc_kek_key_ring_id }}
-#        TF_ACC_KEK_KEY_VERSION: ${{ inputs.tf_acc_kek_key_version }}
-#        TF_ACC_KEK_SERVICE_ACCOUNT: ${{ inputs.tf_acc_kek_service_account }}
-#        TF_ACC_SERVICE_ACCOUNT_FILE: "${PWD}/${{ inputs.service_account_json_file_path }}"
-#      uses: robherley/go-test-action@v0.1.0
-#      with:
-#        testArguments: "./... -timeout 45m"
-
-    - name: Run acceptance tests
-      if: ${{ inputs.test_file == '' }}
-      shell: bash
-      run: |
-        echo "::group::go test all"
-        set -e 
-        set -o pipefail
-
-        echo "Running acceptance tests for the terraform provider"
-        cd stackit || exit 1
-        TF_ACC=1 \
-        TF_ACC_PROJECT_ID=${TF_ACC_PROJECT_ID} \
-        TF_ACC_REGION=${TF_ACC_REGION} \
-        TF_ACC_TEST_PROJECT_USER_EMAIL=${TF_ACC_TEST_PROJECT_USER_EMAIL} \
-        TF_ACC_SERVICE_ACCOUNT_FILE="${PWD}/${{ inputs.service_account_json_file_path }}" \
-        TF_ACC_KEK_KEY_ID=${TF_ACC_KEK_KEY_ID} \
-        TF_ACC_KEK_KEY_RING_ID=${TF_ACC_KEK_KEY_RING_ID} \
-        TF_ACC_KEK_KEY_VERSION=${TF_ACC_KEK_KEY_VERSION} \
-        TF_ACC_KEK_SERVICE_ACCOUNT=${TF_ACC_KEK_SERVICE_ACCOUNT} \
-        go test ./... -count=1 -timeout=${{ inputs.test_timeout_string }}
-        echo "::endgroup::"
-      env:
-        TF_ACC_PROJECT_ID: ${{ inputs.project_id }}
-        TF_ACC_REGION: ${{ inputs.region }}
-        TF_ACC_TEST_PROJECT_USER_EMAIL: ${{ inputs.project_user_email }}
-        TF_ACC_KEK_KEY_ID: ${{ inputs.tf_acc_kek_key_id }}
-        TF_ACC_KEK_KEY_RING_ID: ${{ inputs.tf_acc_kek_key_ring_id }}
-        TF_ACC_KEK_KEY_VERSION: ${{ inputs.tf_acc_kek_key_version }}
-        TF_ACC_KEK_SERVICE_ACCOUNT: ${{ inputs.tf_acc_kek_service_account }}

.github/actions/build/action.yaml

@@ -3,89 +3,14 @@ description: "Build pipeline"
 inputs:
   go-version:
     description: "Go version to install"
-    default: '1.25'
     required: true
-  java-distribution:
-    description: "JAVA distribution to use (default: temurin)"
-    default: 'temurin'
-  java-version:
-    description: "JAVA version to use (default: 21)"
-    default: '21'
-
 runs:
   using: "composite"
   steps:
-    - name: Install needed tools
-      shell: bash
-      run: |
-        set -e
-        apt-get -y -qq update
-        apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget unzip bc
-
-    - name: Checkout
-      uses: actions/checkout@v6
-
     - name: Install Go ${{ inputs.go-version }}
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v5
       with:
-        # go-version: ${{ inputs.go-version }}
-        check-latest: true
-        go-version-file: 'go.mod'
-
-    - name: Determine GOMODCACHE
+        go-version: ${{ inputs.go-version }}
+    - name: Install project tools and dependencies
       shell: bash
-      id: goenv
-      run: |
-        set -e
-        # echo "::set-output name=gomodcache::$(go env GOMODCACHE)"
-        echo "gomodcache=$(go env GOMODCACHE)" >> "$GITHUB_OUTPUT"
-
-    - name: Restore cached GO pkg
-      id: cache-gopkg
-      uses: actions/cache/restore@v5
-      with:
-        path: "${{ steps.goenv.outputs.gomodcache }}"
-        key: ${{ runner.os }}-gopkg
-
-    - name: Install go tools
-      if: steps.cache-gopkg.outputs.cache-hit != 'true'
-      shell: bash
-      run: |
-        set -e
-        go install golang.org/x/tools/cmd/goimports@latest
-        go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-        go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-        go install github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs@latest
-
-#    - name: Run build pkg directory
-#      shell: bash
-#      run: |
-#        set -e
-#        go run generator/main.go build
-
-    - name: Get all go packages
-      if: steps.cache-gopkg.outputs.cache-hit != 'true'
-      shell: bash
-      run: |
-        set -e
-        go get ./...
-
-    - name: Save Cache
-      id: cache-gopkg-save
-      uses: actions/cache/save@v5
-      with:
-        path: |
-          ${{ steps.goenv.outputs.gomodcache }}
-        key: ${{ runner.os }}-gopkg
-
-    - name: Setup JAVA ${{ inputs.java-distribution }} ${{ inputs.go-version }}
-      uses: actions/setup-java@v5
-      with:
-        distribution: ${{ inputs.java-distribution }} # See 'Supported distributions' for available options
-        java-version: ${{ inputs.java-version }}
-
-    - name: Run make to build app
-      shell: bash
-      run: |
-        set -e
-        make build
+      run: make project-tools

.github/actions/setup-cache-go/action.yaml

@@ -1,71 +0,0 @@
-name: 'Setup Go and cache dependencies'
-author: 'Forgejo authors, Marcel S. Henselin'
-description: |
-  Wrap the setup-go with improved dependency caching.
-
-inputs:
-  username:
-    description: 'User for which to manage the dependency cache'
-    default: root
-
-  go-version:
-    description: "go version to install"
-    default: '1.25'
-    required: true
-
-runs:
-  using: "composite"
-  steps:
-    - name: "Install zstd for faster caching"
-      shell: bash
-      run: |
-        apt-get update -qq
-        apt-get -q install -qq -y zstd
-
-    - name: "Set up Go using setup-go"
-      uses: https://code.forgejo.org/actions/setup-go@v6
-      id: go-version
-      with:
-        # go-version: ${{ inputs.go-version }}
-        check-latest: true # Always check for the latest patch release
-        go-version-file: "go.mod"
-        # do not cache dependencies, we do this manually
-        cache: false
-
-    - name: "Get go environment information"
-      shell: bash
-      id: go-environment
-      run: |
-        chmod 755 $HOME # ensure ${RUN_AS_USER} has permission when go is located in $HOME
-        export GOROOT="$(go env GOROOT)"
-        echo "modcache=$(su ${RUN_AS_USER} -c '${GOROOT}/bin/go env GOMODCACHE')" >> "$GITHUB_OUTPUT"
-        echo "cache=$(su ${RUN_AS_USER} -c '${GOROOT}/bin/go env GOCACHE')" >> "$GITHUB_OUTPUT"
-      env:
-        RUN_AS_USER: ${{ inputs.username }}
-        GO_VERSION: ${{ steps.go-version.outputs.go-version }}
-
-    - name: "Create cache folders with correct permissions (for non-root users)"
-      shell: bash
-      if: inputs.username != 'root'
-      # when the cache is restored, only the permissions of the last part are restored
-      # so assuming that /home/user exists and we are restoring /home/user/go/pkg/mod,
-      # both folders will have the correct permissions, but
-      # /home/user/go and /home/user/go/pkg might be owned by root
-      run: |
-        su ${RUN_AS_USER} -c 'mkdir -p "${MODCACHE_DIR}" "${CACHE_DIR}"'
-      env:
-        RUN_AS_USER: ${{ inputs.username }}
-        MODCACHE_DIR: ${{ steps.go-environment.outputs.modcache }}
-        CACHE_DIR: ${{ steps.go-environment.outputs.cache }}
-
-    - name: "Restore Go dependencies from cache or mark for later caching"
-      id: cache-deps
-      uses: https://code.forgejo.org/actions/cache@v5
-      with:
-        key: setup-cache-go-deps-${{ runner.os }}-${{ inputs.username }}-${{ steps.go-version.outputs.go_version }}-${{ hashFiles('go.sum', 'go.mod') }}
-        restore-keys: |
-          setup-cache-go-deps-${{ runner.os }}-${{ inputs.username }}-${{ steps.go-version.outputs.go_version }}-
-          setup-cache-go-deps-${{ runner.os }}-${{ inputs.username }}-
-        path: |
-          ${{ steps.go-environment.outputs.modcache }}
-          ${{ steps.go-environment.outputs.cache }}

.github/docs/contribution-guide/resource.go

@@ -14,10 +14,10 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/schema/validator"
 	"github.com/hashicorp/terraform-plugin-framework/types"
 	"github.com/hashicorp/terraform-plugin-log/tflog"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
-	fooUtils "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/foo/utils"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
+	"github.com/mhenselin/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
+	"github.com/mhenselin/terraform-provider-stackitprivatepreview/stackit/internal/core"
+	fooUtils "github.com/mhenselin/terraform-provider-stackitprivatepreview/stackit/internal/services/foo/utils"
+	"github.com/mhenselin/terraform-provider-stackitprivatepreview/stackit/internal/utils"
 
 	"github.com/stackitcloud/stackit-sdk-go/services/foo"      // Import service "foo" from the STACKIT SDK for Go
 	"github.com/stackitcloud/stackit-sdk-go/services/foo/wait" // Import service "foo" waiters from the STACKIT SDK for Go (in case the service API has asynchronous endpoints)

.github/docs/contribution-guide/utils/util.go

@@ -7,10 +7,10 @@ import (
 	"fmt"
 
 	"github.com/hashicorp/terraform-plugin-framework/diag"
+	"github.com/mhenselin/terraform-provider-stackitprivatepreview/stackit/internal/core"
+	"github.com/mhenselin/terraform-provider-stackitprivatepreview/stackit/internal/utils"
 	"github.com/stackitcloud/stackit-sdk-go/core/config"
 	"github.com/stackitcloud/stackit-sdk-go/services/foo"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
 )
 
 func ConfigureClient(ctx context.Context, providerData *core.ProviderData, diags *diag.Diagnostics) *foo.APIClient {

.github/workflows/ci.yaml

@@ -0,0 +1,90 @@
+name: CI Workflow
+
+on:
+  pull_request:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+
+env:
+  GO_VERSION: "1.25"
+  CODE_COVERAGE_FILE_NAME: "coverage.out" # must be the same as in Makefile
+  CODE_COVERAGE_ARTIFACT_NAME: "code-coverage"
+
+jobs:
+  main:
+    name: CI
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      
+      - name: Build
+        uses: ./.github/actions/build
+        with:
+          go-version: ${{ env.GO_VERSION }}
+      
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v2
+        with:
+          terraform_wrapper: false
+
+      - name: "Ensure docs are up-to-date"
+        if: ${{ github.event_name == 'pull_request' }}
+        run: ./scripts/check-docs.sh
+        continue-on-error: true
+
+      - name: "Run go mod tidy"
+        if: ${{ github.event_name == 'pull_request' }}
+        run: go mod tidy
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v9
+        with:
+          version: v2.7
+          args: --config=golang-ci.yaml --allow-parallel-runners --timeout=5m
+
+      - name: Lint
+        run: make lint
+      
+      - name: Test
+        run: make test
+
+      - name: Archive code coverage results
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
+          path: "stackit/${{ env.CODE_COVERAGE_FILE_NAME }}"
+
+
+  config:
+    name: Check GoReleaser config
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Check GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          args: check
+
+  code_coverage:
+    name: "Code coverage report"
+    if: github.event_name == 'pull_request' # Do not run when workflow is triggered by push to main branch
+    runs-on: ubuntu-latest
+    needs: main
+    permissions:
+      contents: read
+      actions: read  # to download code coverage results from "main" job
+      pull-requests: write # write permission needed to comment on PR
+    steps:
+      - name: Check new code coverage
+        uses: fgrosse/go-coverage-report@v1.2.0
+        continue-on-error: true  # Add this line to prevent pipeline failures in forks
+        with:
+          coverage-artifact-name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
+          coverage-file-name: ${{ env.CODE_COVERAGE_FILE_NAME }}
+          root-package: 'github.com/stackitcloud/terraform-provider-stackit'

.github/workflows/ci.yaml.bak

@@ -1,290 +0,0 @@
-name: CI Workflow
-
-on:
-  pull_request:
-    branches:
-      - alpha
-      - main
-  workflow_dispatch:
-  schedule:
-    # every sunday at 00:00
-    # - cron: '0 0 * * 0'
-    # every day at 00:00
-    - cron: '0 0 * * *'
-  push:
-    branches:
-      - '!main'
-      - '!alpha'
-
-env:
-  GO_VERSION: "1.25"
-  CODE_COVERAGE_FILE_NAME: "coverage.out" # must be the same as in Makefile
-  CODE_COVERAGE_ARTIFACT_NAME: "code-coverage"
-
-jobs:
-  runner_test:
-    name: "Test STACKIT runner"
-    runs-on: stackit-docker
-    steps:
-      - name: Install needed tools
-        run: |
-          apt-get -y -qq update
-          apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Install go tools
-        run: |
-          go install golang.org/x/tools/cmd/goimports@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-
-      - name: Setup JAVA
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin' # See 'Supported distributions' for available options
-          java-version: '21'
-
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Run build pkg directory
-        run: |
-          go run cmd/main.go build
-
-  publish_test:
-    name: "Test readiness for publishing provider"
-    needs: config
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read        # Required to identify workflow run.
-      checks: write        # Required to add status summary.
-      contents: read       # Required to checkout repository.
-      pull-requests: write # Required to add PR comment.
-    steps:
-      - name: Install needed tools
-        run: |
-          apt-get -y -qq update
-          apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Install go tools
-        run: |
-          go install golang.org/x/tools/cmd/goimports@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-
-      - name: Setup JAVA
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin' # See 'Supported distributions' for available options
-          java-version: '21'
-
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Run build pkg directory
-        run: |
-          go run cmd/main.go build
-
-      - name: Set up s3cfg
-        run: |
-          cat <<'EOF' >> ~/.s3cfg
-          [default]
-          host_base = https://object.storage.eu01.onstackit.cloud
-          host_bucket = https://%(bucket).object.storage.eu01.onstackit.cloud
-          check_ssl_certificate = False
-          access_key = ${{ secrets.S3_ACCESS_KEY }}
-          secret_key = ${{ secrets.S3_SECRET_KEY }}
-          EOF
-
-      - name: Import GPG key
-        run: |
-          echo "${{ secrets.PRIVATE_KEY_PEM }}" > ~/private.key.pem
-          gpg --import ~/private.key.pem
-          rm ~/private.key.pem
-
-      - name: Run GoReleaser with SNAPSHOT
-        id: goreleaser
-        env:
-          GITHUB_TOKEN: ${{ env.FORGEJO_TOKEN }}
-          GPG_FINGERPRINT: ${{ secrets.GPG_FINGERPRINT }}
-        uses: goreleaser/goreleaser-action@v6
-        with:
-          args: release --skip publish --clean --snapshot
-
-      - name: Prepare key file
-        run: |
-          echo "${{ secrets.PUBLIC_KEY_PEM }}" >public_key.pem
-
-      - name: Prepare provider directory structure
-        run: |
-          VERSION=$(jq -r .version < dist/metadata.json)
-          go run cmd/main.go \
-            publish \
-              --namespace=mhenselin \
-              --providerName=stackitprivatepreview \
-              --repoName=terraform-provider-stackitprivatepreview \
-              --domain=tfregistry.sysops.stackit.rocks \
-              --gpgFingerprint="${{ secrets.GPG_FINGERPRINT }}" \
-              --gpgPubKeyFile=public_key.pem \
-              --version=${VERSION}
-
-  testing:
-    name: CI run tests
-    runs-on: ubuntu-latest
-    needs: config
-    env:
-      TF_ACC_PROJECT_ID: ${{ vars.TF_ACC_PROJECT_ID }}
-      TF_ACC_REGION: ${{ vars.TF_ACC_REGION }}
-      TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_EMAIL: ${{ vars.TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_EMAIL }}
-      TF_ACC_SERVICE_ACCOUNT_FILE: "~/service_account.json"
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Build
-        uses: ./.github/actions/build
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
-        with:
-          terraform_wrapper: false
-
-      - name: Create service account json file
-        if: ${{ github.event_name == 'pull_request' }}
-        run: |
-          echo "${{ secrets.TF_ACC_SERVICE_ACCOUNT_JSON }}" >~/service_account.json
-
-      - name: Run go mod tidy
-        if: ${{ github.event_name == 'pull_request' }}
-        run: go mod tidy
-
-      - name: Testing
-        run: make test
-
-      - name: Acceptance Testing
-        env:
-          TF_ACC: "1"
-        if: ${{ github.event_name == 'pull_request' }}
-        run: make test-acceptance-tf
-
-      - name: Check coverage threshold
-        shell: bash
-        run: |
-          make coverage
-          COVERAGE=$(go tool cover -func=coverage.out | grep total | awk '{print $3}' | sed 's/%//')
-          echo "Coverage: $COVERAGE%"
-          if (( $(echo "$COVERAGE < 80" | bc -l) )); then
-            echo "Coverage is below 80%"
-            # exit 1
-          fi
-
-      - name: Archive code coverage results
-        uses: actions/upload-artifact@v4
-        with:
-          name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
-          path: "stackit/${{ env.CODE_COVERAGE_FILE_NAME }}"
-
-  main:
-    if: ${{ github.event_name != 'schedule' }}
-    name: CI run build and linting
-    runs-on: ubuntu-latest
-    needs: config
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Build
-        uses: ./.github/actions/build
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
-        with:
-          terraform_wrapper: false
-
-      - name: "Ensure docs are up-to-date"
-        if: ${{ github.event_name == 'pull_request' }}
-        run: ./scripts/check-docs.sh
-        continue-on-error: true
-
-      - name: "Run go mod tidy"
-        if: ${{ github.event_name == 'pull_request' }}
-        run: go mod tidy
-
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v9
-        with:
-          version: v2.9
-          args: --config=golang-ci.yaml --allow-parallel-runners --timeout=5m
-        continue-on-error: true
-
-      - name: Linting
-        run: make lint
-        continue-on-error: true
-
-  #      - name: Testing
-  #        run: make test
-  #
-  #      - name: Acceptance Testing
-  #        if: ${{ github.event_name == 'pull_request' }}
-  #        run: make test-acceptance-tf
-  #
-  #      - name: Check coverage threshold
-  #        shell: bash
-  #        run: |
-  #          make coverage
-  #          COVERAGE=$(go tool cover -func=coverage.out | grep total | awk '{print $3}' | sed 's/%//')
-  #          echo "Coverage: $COVERAGE%"
-  #          if (( $(echo "$COVERAGE < 80" | bc -l) )); then
-  #            echo "Coverage is below 80%"
-  #            # exit 1
-  #          fi
-
-  #      - name: Archive code coverage results
-  #        uses: actions/upload-artifact@v4
-  #        with:
-  #          name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
-  #          path: "stackit/${{ env.CODE_COVERAGE_FILE_NAME }}"
-
-  config:
-    if: ${{ github.event_name != 'schedule' }}
-    name: Check GoReleaser config
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Check GoReleaser
-        uses: goreleaser/goreleaser-action@v6
-        with:
-          args: check
-
-  code_coverage:
-    name: "Code coverage report"
-    if: github.event_name == 'pull_request' # Do not run when workflow is triggered by push to main branch
-    runs-on: ubuntu-latest
-    needs: main
-    permissions:
-      contents: read
-      actions: read  # to download code coverage results from "main" job
-      pull-requests: write # write permission needed to comment on PR
-    steps:
-      - name: Check new code coverage
-        uses: fgrosse/go-coverage-report@v1.2.0
-        continue-on-error: true  # Add this line to prevent pipeline failures in forks
-        with:
-          coverage-artifact-name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
-          coverage-file-name: ${{ env.CODE_COVERAGE_FILE_NAME }}
-          root-package: 'github.com/stackitcloud/terraform-provider-stackit'

.github/workflows/ci_new.yaml

@@ -1,343 +0,0 @@
-name: CI Workflow
-
-on:
-  pull_request:
-    branches:
-      - alpha
-      - main
-  workflow_dispatch:
-  schedule:
-    # every sunday at 00:00
-    # - cron: '0 0 * * 0'
-    # every day at 00:00
-    - cron: '0 0 * * *'
-  push:
-    branches:
-      - '!main'
-      - '!alpha'
-    paths:
-      - '!.github'
-
-env:
-  GO_VERSION: "1.25"
-  CODE_COVERAGE_FILE_NAME: "coverage.out" # must be the same as in Makefile
-  CODE_COVERAGE_ARTIFACT_NAME: "code-coverage"
-
-jobs:
-  config:
-    if: ${{ github.event_name != 'schedule' }}
-    name: Check GoReleaser config
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Check GoReleaser
-        uses: goreleaser/goreleaser-action@v7
-        with:
-          args: check
-
-  prepare:
-    name: Prepare GO cache
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read        # Required to identify workflow run.
-      checks: write        # Required to add status summary.
-      contents: read       # Required to checkout repository.
-      pull-requests: write # Required to add PR comment.
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Install Go ${{ inputs.go-version }}
-        id: go-install
-        uses: actions/setup-go@v6
-        with:
-          # go-version: ${{ inputs.go-version }}
-          check-latest: true
-          go-version-file: 'go.mod'
-
-      - name: Determine GOMODCACHE
-        shell: bash
-        id: goenv
-        run: |
-          set -e
-          # echo "::set-output name=gomodcache::$(go env GOMODCACHE)"
-          echo "gomodcache=$(go env GOMODCACHE)" >> "$GITHUB_OUTPUT"
-
-      - name: Restore cached GO pkg
-        id: cache-gopkg
-        uses: actions/cache/restore@v5
-        with:
-          path: "${{ steps.goenv.outputs.gomodcache }}"
-          key: ${{ runner.os }}-gopkg
-
-      - name: Install go tools
-        if: steps.cache-gopkg.outputs.cache-hit != 'true'
-        run: |
-          go install golang.org/x/tools/cmd/goimports@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-
-      - name: Get all go packages
-        if: steps.cache-gopkg.outputs.cache-hit != 'true'
-        shell: bash
-        run: |
-          set -e
-          go get ./...
-
-      - name: Save Cache
-        if: steps.cache-gopkg.outputs.cache-hit != 'true'
-        id: cache-gopkg-save
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ${{ steps.goenv.outputs.gomodcache }}
-          key: ${{ runner.os }}-gopkg
-
-
-  publish_test:
-    name: "Test readiness for publishing provider"
-    needs:
-      - config
-      - prepare
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read        # Required to identify workflow run.
-      checks: write        # Required to add status summary.
-      contents: read       # Required to checkout repository.
-      pull-requests: write # Required to add PR comment.
-    steps:
-      - name: Install needed tools
-        run: |
-          apt-get -y -qq update
-          apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget unzip bc
-
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          # go-version: ${{ env.GO_VERSION }}
-          check-latest: true
-          go-version-file: 'go.mod'
-
-      - name: Install go tools
-        run: |
-          go install golang.org/x/tools/cmd/goimports@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-
-      - name: Setup JAVA
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin' # See 'Supported distributions' for available options
-          java-version: '21'
-
-#      - name: Run build pkg directory
-#        run: |
-#          go run generator/main.go build
-
-      - name: Set up s3cfg
-        run: |
-          cat <<'EOF' >> ~/.s3cfg
-          [default]
-          host_base = https://object.storage.eu01.onstackit.cloud
-          host_bucket = https://%(bucket).object.storage.eu01.onstackit.cloud
-          check_ssl_certificate = False
-          access_key = ${{ secrets.S3_ACCESS_KEY }}
-          secret_key = ${{ secrets.S3_SECRET_KEY }}
-          EOF
-
-      - name: Import GPG key
-        run: |
-          echo "${{ secrets.PRIVATE_KEY_PEM }}" > ~/private.key.pem
-          gpg --import ~/private.key.pem
-          rm ~/private.key.pem
-
-      - name: Run GoReleaser with SNAPSHOT
-        id: goreleaser
-        env:
-          GITHUB_TOKEN: ${{ env.FORGEJO_TOKEN }}
-          GPG_FINGERPRINT: ${{ secrets.GPG_FINGERPRINT }}
-        uses: goreleaser/goreleaser-action@v7
-        with:
-          args: release --skip publish --clean --snapshot
-
-      - name: Prepare key file
-        run: |
-          echo "${{ secrets.PUBLIC_KEY_PEM }}" >public_key.pem
-
-      - name: Prepare provider directory structure
-        run: |
-          VERSION=$(jq -r .version < dist/metadata.json)
-          go run generator/main.go \
-            publish \
-              --namespace=mhenselin \
-              --providerName=stackitprivatepreview \
-              --repoName=terraform-provider-stackitprivatepreview \
-              --domain=tfregistry.sysops.stackit.rocks \
-              --gpgFingerprint="${{ secrets.GPG_FINGERPRINT }}" \
-              --gpgPubKeyFile=public_key.pem \
-              --version=${VERSION}
-
-  testing:
-    name: CI run tests
-    runs-on: ubuntu-latest
-    needs:
-      - config
-      - prepare
-    env:
-      TF_ACC_PROJECT_ID: ${{ vars.TF_ACC_PROJECT_ID }}
-      TF_ACC_ORGANIZATION_ID: ${{ vars.TF_ACC_ORGANIZATION_ID }}
-      TF_ACC_REGION: ${{ vars.TF_ACC_REGION }}
-      TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_EMAIL: ${{ vars.TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_EMAIL }}
-      TF_ACC_SERVICE_ACCOUNT_FILE: "~/service_account.json"
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Build
-        uses: ./.github/actions/build
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
-        with:
-          terraform_wrapper: false
-
-      - name: Create service account json file
-        if: ${{ github.event_name == 'pull_request' }}
-        run: |
-          echo "${{ secrets.TF_ACC_SERVICE_ACCOUNT_JSON }}" >~/.service_account.json
-
-      - name: Run go mod tidy
-        if: ${{ github.event_name == 'pull_request' }}
-        run: go mod tidy
-
-      - name: Testing
-        run: |
-          TF_ACC_SERVICE_ACCOUNT_FILE=~/.service_account.json
-          export TF_ACC_SERVICE_ACCOUNT_FILE
-          make test
-
-#      - name: Acceptance Testing
-#        env:
-#          TF_ACC: "1"
-#        if: ${{ github.event_name == 'pull_request' }}
-#        run: |
-#          TF_ACC_SERVICE_ACCOUNT_FILE=~/.service_account.json
-#          export TF_ACC_SERVICE_ACCOUNT_FILE
-#          make test-acceptance-tf
-
-      - name: Run Test
-        if: ${{ github.event_name == 'pull_request' }}
-        uses: ./.github/actions/acc_test
-        with:
-          go-version: ${{ env.GO_VERSION }}
-          project_id: ${{ vars.TF_ACC_PROJECT_ID }}
-          region: ${{ vars.TF_ACC_REGION }}
-          service_account_json_content_b64: "${{ secrets.TF_ACC_SERVICE_ACCOUNT_JSON_B64 }}"
-          project_user_email: ${{ vars.TEST_PROJECT_USER_EMAIL }}
-          tf_acc_kek_key_id: ${{ vars.TF_ACC_KEK_KEY_ID }}
-          tf_acc_kek_key_ring_id: ${{ vars.TF_ACC_KEK_KEY_RING_ID }}
-          tf_acc_kek_key_version: ${{ vars.TF_ACC_KEK_KEY_VERSION }}
-          tf_acc_kek_service_account: ${{ vars.TF_ACC_KEK_SERVICE_ACCOUNT }}
-          # service_account_json_file_path: "~/service_account.json"
-
-      - name: Check coverage threshold
-        shell: bash
-        run: |
-          make coverage
-          COVERAGE=$(go tool cover -func=coverage.out | grep total | awk '{print $3}' | sed 's/%//')
-          echo "Coverage: $COVERAGE%"
-          if (( $(echo "$COVERAGE < 80" | bc -l) )); then
-            echo "Coverage is below 80%"
-            # exit 1
-          fi
-
-      - name: Archive code coverage results
-        uses: actions/upload-artifact@v4
-        with:
-          name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
-          path: "stackit/${{ env.CODE_COVERAGE_FILE_NAME }}"
-
-  main:
-    if: ${{ github.event_name != 'schedule' }}
-    name: CI run build and linting
-    runs-on: ubuntu-latest
-    needs:
-      - config
-      - prepare
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-      
-#      - uses: actions/cache@v5
-#        id: cache
-#        with:
-#          path: path/to/dependencies
-#          key: ${{ runner.os }}-${{ hashFiles('**/lockfiles') }}
-
-#      - name: Install Dependencies
-#        if: steps.cache.outputs.cache-hit != 'true'
-#        run: /install.sh
-
-      - name: Build
-        uses: ./.github/actions/build
-        with:
-          go-version: ${{ env.GO_VERSION }}
-      
-      - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
-        with:
-          terraform_wrapper: false
-
-      - name: "Ensure docs are up-to-date"
-        if: ${{ github.event_name == 'pull_request' }}
-        run: ./scripts/check-docs.sh
-        continue-on-error: true
-
-      - name: "Run go mod tidy"
-        if: ${{ github.event_name == 'pull_request' }}
-        run: go mod tidy
-
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v9
-        with:
-          version: v2.10
-          args: --config=.golang-ci.yaml --allow-parallel-runners --timeout=5m
-        continue-on-error: true
-
-      - name: Linting terraform files
-        run: make lint-tf
-        continue-on-error: true
-
-  code_coverage:
-    name: "Code coverage report"
-    if: github.event_name == 'pull_request' # Do not run when workflow is triggered by push to main branch
-    runs-on: ubuntu-latest
-    needs:
-      - main
-      - prepare
-    permissions:
-      contents: read
-      actions: read  # to download code coverage results from "main" job
-      pull-requests: write # write permission needed to comment on PR
-    steps:
-      - name: Install needed tools
-        shell: bash
-        run: |
-          set -e
-          apt-get -y -qq update
-          apt-get -y -qq install sudo
-
-      - name: Check new code coverage
-        uses: fgrosse/go-coverage-report@v1.2.0
-        continue-on-error: true  # Add this line to prevent pipeline failures in forks
-        with:
-          coverage-artifact-name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}
-          coverage-file-name: ${{ env.CODE_COVERAGE_FILE_NAME }}
-          root-package: 'github.com/stackitcloud/terraform-provider-stackit'

.github/workflows/publish.yaml

@@ -1,140 +0,0 @@
-name: Publish
-
-run-name: Publish by @${{ github.actor }}
-
-on:
-  workflow_dispatch:
-  push:
-    tags:
-      - 'v0.*'
-
-env:
-  GO_VERSION: "1.25"
-  CODE_COVERAGE_FILE_NAME: "coverage.out" # must be the same as in Makefile
-  CODE_COVERAGE_ARTIFACT_NAME: "code-coverage"
-
-jobs:
-  config:
-    name: Check GoReleaser config
-    if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Check GoReleaser
-        uses: goreleaser/goreleaser-action@v7
-        with:
-          args: check
-
-  publish:
-    name: "Publish provider"
-    if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
-    needs: config
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read        # Required to identify workflow run.
-      checks: write        # Required to add status summary.
-      contents: read       # Required to checkout repository.
-      pull-requests: write # Required to add PR comment.
-    steps:
-      - name: Install needed tools
-        run: |
-          apt-get -y -qq update
-          apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget
-
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          # go-version: ${{ env.GO_VERSION }}
-          check-latest: true
-          go-version-file: 'go.mod'
-
-      - name: Install go tools
-        run: |
-          go install golang.org/x/tools/cmd/goimports@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
-          go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
-
-      - name: Setup JAVA
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin' # See 'Supported distributions' for available options
-          java-version: '21'
-
-      - name: Set up s3cfg
-        run: |
-          cat <<'EOF' >> ~/.s3cfg
-          [default]
-          host_base = https://object.storage.eu01.onstackit.cloud
-          host_bucket = https://%(bucket).object.storage.eu01.onstackit.cloud
-          check_ssl_certificate = False
-          access_key = ${{ secrets.S3_ACCESS_KEY }}
-          secret_key = ${{ secrets.S3_SECRET_KEY }}
-          EOF
-
-      - name: Import GPG key
-        run: |
-          echo "${{ secrets.PRIVATE_KEY_PEM }}" > ~/private.key.pem
-          gpg --import ~/private.key.pem
-          rm ~/private.key.pem
-
-      - name: Run GoReleaser with SNAPSHOT
-        if: github.event_name == 'workflow_dispatch'
-        id: goreleaser
-        env:
-          GITHUB_TOKEN: ${{ env.FORGEJO_TOKEN }}
-          GPG_FINGERPRINT: ${{ secrets.GPG_FINGERPRINT }}
-        uses: goreleaser/goreleaser-action@v7
-        with:
-          args: release --skip publish --clean --snapshot
-
-      - name: Run GoReleaser
-        if: github.event_name != 'workflow_dispatch'
-        id: goreleaser
-        env:
-          GITHUB_TOKEN: ${{ env.FORGEJO_TOKEN }}
-          GPG_FINGERPRINT: ${{ secrets.GPG_FINGERPRINT }}
-        uses: goreleaser/goreleaser-action@v7
-        with:
-          args: release --skip publish --clean
-
-      - name: Prepare key file
-        run: |
-          echo "${{ secrets.PUBLIC_KEY_PEM }}" >public_key.pem
-
-      - name: Prepare provider directory structure
-        run: |
-          VERSION=$(jq -r .version < dist/metadata.json)
-          go run generator/main.go \
-            publish \
-              --namespace=mhenselin \
-              --providerName=stackitprivatepreview \
-              --repoName=terraform-provider-stackitprivatepreview \
-              --domain=tfregistry.sysops.stackit.rocks \
-              --gpgFingerprint="${{ secrets.GPG_FINGERPRINT }}" \
-              --gpgPubKeyFile=public_key.pem \
-              --version=${VERSION}
-
-      - name: Publish provider to S3
-        run: |
-          set -e
-          cd release/
-          s3cmd put --recursive v1 s3://terraform-provider-privatepreview/
-          s3cmd put --recursive .well-known s3://terraform-provider-privatepreview/
-
-      - name: Import SSH key
-        run: |
-          mkdir -p ~/.ssh
-          echo "${{ secrets.DOCS_UPLOAD_SSH_KEY }}" > ~/.ssh/id_ed25519
-          chmod 0600 ~/.ssh/id_ed25519
-
-      - name: Upload docs via scp
-        run: |
-          set -e
-          ssh -o StrictHostKeyChecking=no ubuntu@${{ vars.DOCS_SERVER_IP }} 'rm -rf /srv/www/docs'
-          echo "${{ github.ref_name }}" >docs/_version.txt
-          scp -o StrictHostKeyChecking=no -r docs ubuntu@${{ vars.DOCS_SERVER_IP }}:/srv/www/

.github/workflows/release.yaml

@@ -4,9 +4,9 @@ name: Release
 # This GitHub action creates a release when a tag that matches the pattern
 # "v*" (e.g. v0.1.0) is created.
 on:
-#  push:
-#    tags:
-#      - "v*"
+  push:
+    tags:
+      - "v*"
   workflow_dispatch:
 
 # Releases need permissions to read and write the repository contents.
@@ -18,23 +18,21 @@ jobs:
   goreleaser:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           # Allow goreleaser to access older tag information.
           fetch-depth: 0
-
-      - uses: https://code.forgejo.org/actions/setup-go@v6
+      - uses: actions/setup-go@v5
         with:
           go-version-file: "go.mod"
           cache: true
-
       - name: Import GPG key
         uses: crazy-max/ghaction-import-gpg@v6
         id: import_gpg
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v7
+        uses: goreleaser/goreleaser-action@v6
         with:
           args: release --clean
         env:

.github/workflows/renovate.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v4
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@v41.0.0
         with:

.github/workflows/runnerstats.yaml

@@ -1,29 +0,0 @@
-name: Runner stats
-
-on:
-  workflow_dispatch:
-
-jobs:
-  stats-own:
-    name: "Get own runner stats"
-    runs-on: ubuntu-latest
-    steps:
-      - name: Install needed tools
-        run: |
-          apt-get -y -qq update
-          apt-get -y -qq install inxi
-
-      - name: Show stats
-        run: inxi -c 0
-
-  stats-stackit:
-    name: "Get STACKIT runner stats"
-    runs-on: stackit-docker
-    steps:
-      - name: Install needed tools
-        run: |
-          apt-get -y -qq update
-          apt-get -y -qq install inxi
-
-      - name: Show stats
-        run: inxi -c 0

.github/workflows/tf-acc-test.yaml

@@ -7,23 +7,21 @@ on:
   workflow_dispatch:
 
 jobs:
-  acc_test:
+  main:
     name: Acceptance Tests
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Run Test
-        uses: ./.github/actions/acc_test
-        with:
-          go-version: ${{ env.GO_VERSION }}
-          project_id: ${{ vars.TF_ACC_PROJECT_ID }}
-          region: 'eu01'
-          service_account_json_content_b64: "${{ secrets.TF_ACC_SERVICE_ACCOUNT_JSON_B64 }}"
-          project_user_email: ${{ vars.TEST_PROJECT_USER_EMAIL }}
-          tf_acc_kek_key_id: ${{ vars.TF_ACC_KEK_KEY_ID }}
-          tf_acc_kek_key_ring_id: ${{ vars.TF_ACC_KEK_KEY_RING_ID }}
-          tf_acc_kek_key_version: ${{ vars.TF_ACC_KEK_KEY_VERSION }}
-          tf_acc_kek_service_account: ${{ vars.TF_ACC_KEK_SERVICE_ACCOUNT }}
-          # service_account_json_file_path: "~/service_account.json"
+        uses: actions/checkout@v4
+      - name: Install project tools and dependencies
+        run: make project-tools
+      - name: Run tests
+        run: |
+          make test-acceptance-tf TF_ACC_PROJECT_ID=$${{ secrets.TF_ACC_PROJECT_ID }} TF_ACC_ORGANIZATION_ID=$${{ secrets.TF_ACC_ORGANIZATION_ID }} TF_ACC_REGION="eu01"
+        env:
+          STACKIT_SERVICE_ACCOUNT_TOKEN: ${{ secrets.TF_ACC_SERVICE_ACCOUNT_TOKEN }}
+          TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_EMAIL: ${{ secrets.TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_EMAIL }}
+          TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_TOKEN: ${{ secrets.TF_ACC_TEST_PROJECT_SERVICE_ACCOUNT_TOKEN }}
+          TF_ACC_TEST_PROJECT_PARENT_CONTAINER_ID: ${{ secrets.TF_ACC_TEST_PROJECT_PARENT_CONTAINER_ID }}
+          TF_ACC_TEST_PROJECT_PARENT_UUID: ${{ secrets.TF_ACC_TEST_PROJECT_PARENT_UUID }}
+          TF_ACC_TEST_PROJECT_USER_EMAIL: ${{ secrets.TF_ACC_TEST_PROJECT_USER_EMAIL }}

.gitignore

@@ -38,14 +38,3 @@ stackit/internal/services/iaas/test-512k.img
 # Test coverage reports
 coverage.out
 coverage.html
-generated
-stackit-sdk-generator
-stackit-sdk-generator/**
-dist
-
-.secrets
-
-pkg_gen
-/release/
-.env
-**/.env

.goreleaser.yaml

@@ -5,8 +5,6 @@
 # behavior.
 version: 2
 
-project_name: terraform-provider-stackitprivatepreview
-
 builds:
 - env:
     # goreleaser does not work with CGO, it could also complicate
@@ -31,16 +29,14 @@ builds:
   ignore:
     - goos: darwin
       goarch: '386'
-    - goos: windows
-      goarch: arm
   binary: '{{ .ProjectName }}_v{{ .Version }}'
 archives:
 - formats: [ 'zip' ]
   name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
 checksum:
-#  extra_files:
-#    - glob: 'terraform-registry-manifest.json'
-#      name_template: '{{ .ProjectName }}_{{ .Version }}_manifest.json'
+  extra_files:
+    - glob: 'terraform-registry-manifest.json'
+      name_template: '{{ .ProjectName }}_{{ .Version }}_manifest.json'
   name_template: '{{ .ProjectName }}_{{ .Version }}_SHA256SUMS'
   algorithm: sha256
 signs:

Makefile

@@ -1,6 +1,5 @@
 ROOT_DIR              ?= $(shell git rev-parse --show-toplevel)
 SCRIPTS_BASE          ?= $(ROOT_DIR)/scripts
-VERSION               ?= ${VER}
 
 # SETUP AND TOOL INITIALIZATION TASKS
 project-help:
@@ -12,20 +11,17 @@ project-tools:
 # LINT
 lint-golangci-lint:
 	@echo "Linting with golangci-lint"
-	@go run github.com/golangci/golangci-lint/v2/cmd/golangci-lint run --fix --config .golang-ci.yaml
+	@$(SCRIPTS_BASE)/lint-golangci-lint.sh
 
-
-lint-tf:
+lint-tf: 
 	@echo "Linting terraform files"
-	@terraform fmt -check -diff -recursive examples/
-	@terraform fmt -check -diff -recursive stackit/
+	@terraform fmt -check -diff -recursive
 
 lint: lint-golangci-lint lint-tf
 
 # DOCUMENTATION GENERATION
 generate-docs:
 	@echo "Generating documentation with tfplugindocs"
-
 	@$(SCRIPTS_BASE)/tfplugindocs.sh
 
 build:
@@ -37,16 +33,15 @@ fmt:
 	@terraform fmt -diff -recursive
 
 # TEST
-.PHONY: test coverage
 test:
 	@echo "Running tests for the terraform provider"
-	@cd $(ROOT_DIR)/stackit && go test -timeout 0 ./... -count=1 -coverprofile=../coverage.out && cd $(ROOT_DIR)
+	@cd $(ROOT_DIR)/stackit && go test ./... -count=1 -coverprofile=coverage.out && cd $(ROOT_DIR)
 
 # Test coverage
 coverage:
 	@echo ">> Creating test coverage report for the terraform provider"
-	@cd $(ROOT_DIR)/stackit && (go test -timeout 0 ./... -count=1 -coverprofile=../coverage.out || true) && cd $(ROOT_DIR)
-	@cd $(ROOT_DIR)/stackit && go tool cover -html=../coverage.out -o ../coverage.html && cd $(ROOT_DIR)
+	@cd $(ROOT_DIR)/stackit && (go test ./... -count=1 -coverprofile=coverage.out || true) && cd $(ROOT_DIR)
+	@cd $(ROOT_DIR)/stackit && go tool cover -html=coverage.out -o coverage.html && cd $(ROOT_DIR)
 
 test-acceptance-tf:
 	@if [ -z $(TF_ACC_PROJECT_ID) ]; then echo "Input TF_ACC_PROJECT_ID missing"; exit 1; fi
@@ -62,11 +57,3 @@ test-acceptance-tf:
 	TF_ACC_REGION=$(TF_ACC_REGION) \
 	go test ./... -count=1 -timeout=30m && \
 	cd $(ROOT_DIR)
-
-publish: build
-ifeq ($(strip $(VERSION)),)
-	@echo "please call like this: VER=0.1.0 make publish"
-else
-	@echo "version: $(VERSION)"
-endif
-

README.md

@@ -1,14 +1,15 @@
 <div align="center">
+<br>
 <img src=".github/images/stackit-logo.svg" alt="STACKIT logo" width="50%"/>
+<br>
+<br>
 </div>
 
-# STACKIT Terraform Provider <br />(PRIVATE PREVIEW)
+# STACKIT Terraform Provider
 
-[![GitHub Release](https://img.shields.io/github/v/release/stackitcloud/terraform-provider-stackit)](https://registry.terraform.io/providers/stackitcloud/stackit/latest) ![GitHub go.mod Go version](https://img.shields.io/github/go-mod/go-version/stackitcloud/terraform-provider-stackit) [![GitHub License](https://img.shields.io/github/license/stackitcloud/terraform-provider-stackit)](https://www.apache.org/licenses/LICENSE-2.0)
+[![Go Report Card](https://goreportcard.com/badge/github.com/stackitcloud/terraform-provider-stackit)](https://goreportcard.com/report/github.com/stackitcloud/terraform-provider-stackit) [![GitHub Release](https://img.shields.io/github/v/release/stackitcloud/terraform-provider-stackit)](https://registry.terraform.io/providers/stackitcloud/stackit/latest) ![GitHub go.mod Go version](https://img.shields.io/github/go-mod/go-version/stackitcloud/terraform-provider-stackit) [![GitHub License](https://img.shields.io/github/license/stackitcloud/terraform-provider-stackit)](https://www.apache.org/licenses/LICENSE-2.0)
 
-This project is the **NOT** official [Terraform Provider](https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs) for [STACKIT](https://www.stackit.de/en/)!
-
-This a **private preview only**, which allows you to manage STACKIT resources through Terraform.
+This project is the official [Terraform Provider](https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs) for [STACKIT](https://www.stackit.de/en/), which allows you to manage STACKIT resources through Terraform.
 
 ## Getting Started
 
@@ -17,22 +18,20 @@ To install the [STACKIT Terraform Provider](https://registry.terraform.io/provid
 ```hcl
 terraform {
   required_providers {
-    stackitprivatepreview = {
-      source  = "tfregistry.sysops.stackit.rocks/mhenselin/stackitprivatepreview"
-      version = "= 0.0.5-alpha"
+    stackit = {
+      source = "stackitcloud/stackit"
+      version = "X.X.X"
     }
   }
 }
 
-provider "stackitprivatepreview" {
+provider "stackit" {
   # Configuration options
 }
 ```
 
 Check one of the examples in the [examples](examples/) folder.
 
-<big font-size="3rem">TODO: revise the following sections</big>
-
 ## Authentication
 
 To authenticate, you will need a [service account](https://docs.stackit.cloud/platform/access-and-identity/service-accounts/). Create it in the [STACKIT Portal](https://portal.stackit.cloud/) and assign the necessary permissions to it, e.g. `project.owner`. There are multiple ways to authenticate:

docs/data-sources/postgresflexalpha_database.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_postgresflexalpha_database Data Source - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  Postgres Flex database resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_postgresflexalpha_database (Data Source)
 
-
+Postgres Flex database resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -25,14 +25,16 @@ data "stackitprivatepreview_postgresflexalpha_database" "example" {
 
 ### Required
 
-- `database_id` (Number) The ID of the database.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `database_id` (String) Database ID.
+- `instance_id` (String) ID of the Postgres Flex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+
+### Optional
+
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `id` (String) Terraform's internal resource ID. It is structured as \"`project_id`,`region`,`instance_id`,`database_id`\".",
-- `name` (String) The name of the database.
-- `owner` (String) The owner of the database.
-- `tf_original_api_id` (Number) The id of the database.
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`,`database_id`".
+- `name` (String) Database name.
+- `owner` (String) Username of the database owner.

docs/data-sources/postgresflexalpha_flavor.md

@@ -10,18 +10,7 @@ description: |-
 
 
 
-## Example Usage
 
-```terraform
-data "stackitprivatepreview_postgresflexalpha_flavor" "flavor" {
-  project_id    = var.project_id
-  region        = var.region
-  cpu           = 4
-  ram           = 16
-  node_type     = "Single"
-  storage_class = "premium-perf2-stackit"
-}
-```
 
 <!-- schema generated by tfplugindocs -->
 ## Schema

docs/data-sources/postgresflexalpha_flavors.md

@@ -1,68 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_postgresflexalpha_flavors Data Source - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_postgresflexalpha_flavors (Data Source)
-
-
-
-
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Optional
-
-- `page` (Number) Number of the page of items list to be returned.
-- `size` (Number) Number of items to be returned on each page.
-- `sort` (String) Sorting of the flavors to be returned on each page.
-
-### Read-Only
-
-- `flavors` (Attributes List) List of flavors available for the project. (see [below for nested schema](#nestedatt--flavors))
-- `pagination` (Attributes) (see [below for nested schema](#nestedatt--pagination))
-
-<a id="nestedatt--flavors"></a>
-### Nested Schema for `flavors`
-
-Read-Only:
-
-- `cpu` (Number) The cpu count of the instance.
-- `description` (String) The flavor description.
-- `max_gb` (Number) maximum storage which can be ordered for the flavor in Gigabyte.
-- `memory` (Number) The memory of the instance in Gibibyte.
-- `min_gb` (Number) minimum storage which is required to order in Gigabyte.
-- `node_type` (String) defines the nodeType it can be either single or replica
-- `storage_classes` (Attributes List) maximum storage which can be ordered for the flavor in Gigabyte. (see [below for nested schema](#nestedatt--flavors--storage_classes))
-- `tf_original_api_id` (String) The id of the instance flavor.
-
-<a id="nestedatt--flavors--storage_classes"></a>
-### Nested Schema for `flavors.storage_classes`
-
-Read-Only:
-
-- `class` (String)
-- `max_io_per_sec` (Number)
-- `max_through_in_mb` (Number)
-
-
-
-<a id="nestedatt--pagination"></a>
-### Nested Schema for `pagination`
-
-Read-Only:
-
-- `page` (Number)
-- `size` (Number)
-- `sort` (String)
-- `total_pages` (Number)
-- `total_rows` (Number)

docs/data-sources/postgresflexalpha_instance.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_postgresflexalpha_instance Data Source - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  Postgres Flex instance data source schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_postgresflexalpha_instance (Data Source)
 
-
+Postgres Flex instance data source schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -24,54 +24,34 @@ data "stackitprivatepreview_postgresflexalpha_instance" "example" {
 
 ### Required
 
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `instance_id` (String) ID of the PostgresFlex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+
+### Optional
+
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `acl` (List of String) List of IPV4 cidr.
-- `backup_schedule` (String) The schedule for when the database backup will be created. Currently, ONLY daily schedules are supported (every 24 hours). The schedule is written as a cron schedule.
-- `connection_info` (Attributes) The connection information of the instance (see [below for nested schema](#nestedatt--connection_info))
-- `encryption` (Attributes) The configuration for instance's volume and backup storage encryption.
-
-⚠︝ **Note:** This feature is in private preview. Supplying this object is only permitted for enabled accounts. If your account does not have access, the request will be rejected. (see [below for nested schema](#nestedatt--encryption))
-- `flavor_id` (String) The id of the instance flavor.
-- `is_deletable` (Boolean) Whether the instance can be deleted or not.
-- `name` (String) The name of the instance.
-- `network` (Attributes) The access configuration of the instance (see [below for nested schema](#nestedatt--network))
-- `replicas` (Number) How many replicas the instance should have.
-- `retention_days` (Number) How long backups are retained. The value can only be between 32 and 365 days.
-- `status` (String) The current status of the instance.
-- `storage` (Attributes) The object containing information about the storage size and class. (see [below for nested schema](#nestedatt--storage))
-- `tf_original_api_id` (String) The ID of the instance.
-- `version` (String) The Postgres version used for the instance. See [Versions Endpoint](/documentation/postgres-flex-service/version/v3alpha1#tag/Version) for supported version parameters.
-
-<a id="nestedatt--connection_info"></a>
-### Nested Schema for `connection_info`
-
-Read-Only:
-
-- `write` (Attributes) The DNS name and port in the instance overview (see [below for nested schema](#nestedatt--connection_info--write))
-
-<a id="nestedatt--connection_info--write"></a>
-### Nested Schema for `connection_info.write`
-
-Read-Only:
-
-- `host` (String) The host of the instance.
-- `port` (Number) The port of the instance.
-
-
+- `backup_schedule` (String)
+- `encryption` (Attributes) (see [below for nested schema](#nestedatt--encryption))
+- `flavor_id` (String)
+- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`region`,`instance_id`".
+- `name` (String) Instance name.
+- `network` (Attributes) (see [below for nested schema](#nestedatt--network))
+- `replicas` (Number)
+- `retention_days` (Number)
+- `storage` (Attributes) (see [below for nested schema](#nestedatt--storage))
+- `version` (String)
 
 <a id="nestedatt--encryption"></a>
 ### Nested Schema for `encryption`
 
 Read-Only:
 
-- `kek_key_id` (String) The encryption-key key identifier
-- `kek_key_ring_id` (String) The encryption-key keyring identifier
-- `kek_key_version` (String) The encryption-key version
+- `key_id` (String)
+- `key_version` (String)
+- `keyring_id` (String)
 - `service_account` (String)
 
 
@@ -80,8 +60,8 @@ Read-Only:
 
 Read-Only:
 
-- `access_scope` (String) The access scope of the instance. It defines if the instance is public or airgapped.
-- `acl` (List of String) List of IPV4 cidr.
+- `access_scope` (String)
+- `acl` (List of String) The Access Control List (ACL) for the PostgresFlex instance.
 - `instance_address` (String)
 - `router_address` (String)
 
@@ -91,5 +71,5 @@ Read-Only:
 
 Read-Only:
 
-- `performance_class` (String) The storage class for the storage.
-- `size` (Number) The storage size in Gigabytes.
+- `class` (String)
+- `size` (Number)

docs/data-sources/postgresflexalpha_user.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_postgresflexalpha_user Data Source - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  Postgres Flex user data source schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_postgresflexalpha_user (Data Source)
 
-
+Postgres Flex user data source schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -25,18 +25,20 @@ data "stackitprivatepreview_postgresflexalpha_user" "example" {
 
 ### Required
 
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-- `user_id` (Number) The ID of the user.
+- `instance_id` (String) ID of the PostgresFlex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+- `user_id` (String) User ID.
 
 ### Optional
 
-- `id` (String) Terraform's internal resource ID. It is structured as \"`project_id`,`region`,`instance_id`,`user_id`\".",
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `name` (String) The name of the user.
-- `roles` (List of String) A list of user roles.
-- `status` (String) The current status of the user.
-- `tf_original_api_id` (Number) The ID of the user.
+- `connection_string` (String)
+- `host` (String)
+- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`region`,`instance_id`,`user_id`".
+- `port` (Number)
+- `roles` (Set of String)
+- `status` (String)
+- `username` (String)

docs/data-sources/sqlserverflexalpha_database.md

@@ -1,32 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexalpha_database Data Source - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexalpha_database (Data Source)
-
-
-
-
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `database_name` (String) The name of the database.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Read-Only
-
-- `collation_name` (String) The collation of the database. This database collation should match the *collation_name* of one of the collations given by the **Get database collation list** endpoint.
-- `compatibility_level` (Number) CompatibilityLevel of the Database.
-- `id` (String) The terraform internal identifier.
-- `name` (String) The name of the database.
-- `owner` (String) The owner of the database.
-- `tf_original_api_id` (Number) The id of the database.

docs/data-sources/sqlserverflexalpha_flavor.md

@@ -0,0 +1,43 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "stackitprivatepreview_sqlserverflexalpha_flavor Data Source - stackitprivatepreview"
+subcategory: ""
+description: |-
+  
+---
+
+# stackitprivatepreview_sqlserverflexalpha_flavor (Data Source)
+
+
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `cpu` (Number) The cpu count of the instance.
+- `node_type` (String) defines the nodeType it can be either single or replica
+- `project_id` (String) The cpu count of the instance.
+- `ram` (Number) The memory of the instance in Gibibyte.
+- `region` (String) The flavor description.
+- `storage_class` (String) The memory of the instance in Gibibyte.
+
+### Read-Only
+
+- `description` (String) The flavor description.
+- `flavor_id` (String) The flavor id of the instance flavor.
+- `id` (String) The terraform id of the instance flavor.
+- `max_gb` (Number) maximum storage which can be ordered for the flavor in Gigabyte.
+- `min_gb` (Number) minimum storage which is required to order in Gigabyte.
+- `storage_classes` (Attributes List) (see [below for nested schema](#nestedatt--storage_classes))
+
+<a id="nestedatt--storage_classes"></a>
+### Nested Schema for `storage_classes`
+
+Read-Only:
+
+- `class` (String)
+- `max_io_per_sec` (Number)
+- `max_through_in_mb` (Number)

docs/data-sources/sqlserverflexalpha_instance.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_sqlserverflexalpha_instance Data Source - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  SQLServer Flex ALPHA instance resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_sqlserverflexalpha_instance (Data Source)
 
-
+SQLServer Flex ALPHA instance resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -24,48 +24,61 @@ data "stackitprivatepreview_sqlserverflexalpha_instance" "example" {
 
 ### Required
 
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `instance_id` (String) ID of the SQLServer Flex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+
+### Optional
+
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `backup_schedule` (String) The schedule for on what time and how often the database backup will be created. The schedule is written as a cron schedule.
-- `edition` (String) Edition of the MSSQL server instance
-- `encryption` (Attributes) this defines which key to use for storage encryption (see [below for nested schema](#nestedatt--encryption))
-- `flavor_id` (String) The id of the instance flavor.
-- `is_deletable` (Boolean) Whether the instance can be deleted or not.
-- `name` (String) The name of the instance.
-- `network` (Attributes) The access configuration of the instance (see [below for nested schema](#nestedatt--network))
-- `replicas` (Number) How many replicas the instance should have.
-- `retention_days` (Number) The days for how long the backup files should be stored before cleaned up. 30 to 365
+- `backup_schedule` (String) The backup schedule. Should follow the cron scheduling system format (e.g. "0 0 * * *")
+- `edition` (String)
+- `encryption` (Attributes) The encryption block. (see [below for nested schema](#nestedatt--encryption))
+- `flavor` (Attributes) (see [below for nested schema](#nestedatt--flavor))
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`".
+- `is_deletable` (Boolean)
+- `name` (String) Instance name.
+- `network` (Attributes) The network block. (see [below for nested schema](#nestedatt--network))
+- `replicas` (Number)
+- `retention_days` (Number)
 - `status` (String)
-- `storage` (Attributes) The object containing information about the storage size and class. (see [below for nested schema](#nestedatt--storage))
-- `tf_original_api_id` (String) The ID of the instance.
-- `version` (String) The sqlserver version used for the instance.
+- `storage` (Attributes) (see [below for nested schema](#nestedatt--storage))
+- `version` (String)
 
 <a id="nestedatt--encryption"></a>
 ### Nested Schema for `encryption`
 
 Read-Only:
 
-- `kek_key_id` (String) The key identifier
-- `kek_key_ring_id` (String) The keyring identifier
-- `kek_key_version` (String) The key version
+- `key_id` (String) STACKIT KMS - Key ID of the encryption key to use.
+- `key_version` (String) STACKIT KMS - Key version to use in the encryption key.
+- `keyring_id` (String) STACKIT KMS - KeyRing ID of the encryption key to use.
 - `service_account` (String)
 
 
+<a id="nestedatt--flavor"></a>
+### Nested Schema for `flavor`
+
+Read-Only:
+
+- `cpu` (Number)
+- `description` (String)
+- `id` (String)
+- `node_type` (String)
+- `ram` (Number)
+
+
 <a id="nestedatt--network"></a>
 ### Nested Schema for `network`
 
 Read-Only:
 
-- `access_scope` (String) The network access scope of the instance
-
-⚠️ **Note:** This feature is in private preview. Supplying this object is only permitted for enabled accounts. If your account does not have access, the request will be rejected.
-- `acl` (List of String) List of IPV4 cidr.
-- `instance_address` (String)
-- `router_address` (String)
+- `access_scope` (String) The access scope of the instance. (e.g. SNA)
+- `acl` (List of String) The Access Control List (ACL) for the SQLServer Flex instance.
+- `instance_address` (String) The returned instance IP address of the SQLServer Flex instance.
+- `router_address` (String) The returned router IP address of the SQLServer Flex instance.
 
 
 <a id="nestedatt--storage"></a>
@@ -73,5 +86,5 @@ Read-Only:
 
 Read-Only:
 
-- `class` (String) The storage class for the storage.
-- `size` (Number) The storage size in Gigabytes.
+- `class` (String)
+- `size` (Number)

docs/data-sources/sqlserverflexalpha_user.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_sqlserverflexalpha_user Data Source - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  SQLServer Flex user data source schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_sqlserverflexalpha_user (Data Source)
 
-
+SQLServer Flex user data source schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -25,38 +25,20 @@ data "stackitprivatepreview_sqlserverflexalpha_user" "example" {
 
 ### Required
 
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `instance_id` (String) ID of the SQLServer Flex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+- `user_id` (Number) User ID.
 
 ### Optional
 
-- `page` (Number) Number of the page of items list to be returned.
-- `size` (Number) Number of items to be returned on each page.
-- `sort` (String) Sorting of the users to be returned on each page.
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `pagination` (Attributes) (see [below for nested schema](#nestedatt--pagination))
-- `users` (Attributes List) List of all users inside an instance (see [below for nested schema](#nestedatt--users))
-
-<a id="nestedatt--pagination"></a>
-### Nested Schema for `pagination`
-
-Read-Only:
-
-- `page` (Number)
-- `size` (Number)
-- `sort` (String)
-- `total_pages` (Number)
-- `total_rows` (Number)
-
-
-<a id="nestedatt--users"></a>
-### Nested Schema for `users`
-
-Read-Only:
-
-- `status` (String) The current status of the user.
-- `tf_original_api_id` (Number) The ID of the user.
-- `username` (String) The name of the user.
+- `default_database` (String)
+- `host` (String)
+- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`region`,`instance_id`,`user_id`".
+- `port` (Number)
+- `roles` (Set of String) Database access levels for the user.
+- `status` (String)
+- `username` (String) Username of the SQLServer Flex instance.

docs/data-sources/sqlserverflexbeta_database.md

@@ -1,40 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexbeta_database Data Source - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexbeta_database (Data Source)
-
-
-
-## Example Usage
-
-```terraform
-data "stackitprivatepreview_sqlserverflexbeta_database" "example" {
-  project_id    = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id   = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  database_name = "dbname"
-}
-```
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `database_name` (String) The name of the database.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Read-Only
-
-- `collation_name` (String) The collation of the database. This database collation should match the *collation_name* of one of the collations given by the **Get database collation list** endpoint.
-- `compatibility_level` (Number) CompatibilityLevel of the Database.
-- `id` (String) The terraform internal identifier.
-- `name` (String) The name of the database.
-- `owner` (String) The owner of the database.
-- `tf_original_api_id` (Number) The id of the database.

docs/data-sources/sqlserverflexbeta_instance.md

@@ -1,77 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexbeta_instance Data Source - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexbeta_instance (Data Source)
-
-
-
-## Example Usage
-
-```terraform
-data "stackitprivatepreview_sqlserverflexbeta_instance" "example" {
-  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-}
-```
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Read-Only
-
-- `backup_schedule` (String) The schedule for on what time and how often the database backup will be created. The schedule is written as a cron schedule.
-- `edition` (String) Edition of the MSSQL server instance
-- `encryption` (Attributes) this defines which key to use for storage encryption (see [below for nested schema](#nestedatt--encryption))
-- `flavor_id` (String) The id of the instance flavor.
-- `is_deletable` (Boolean) Whether the instance can be deleted or not.
-- `name` (String) The name of the instance.
-- `network` (Attributes) The access configuration of the instance (see [below for nested schema](#nestedatt--network))
-- `replicas` (Number) How many replicas the instance should have.
-- `retention_days` (Number) The days for how long the backup files should be stored before cleaned up. 30 to 365
-- `status` (String)
-- `storage` (Attributes) The object containing information about the storage size and class. (see [below for nested schema](#nestedatt--storage))
-- `tf_original_api_id` (String) The ID of the instance.
-- `version` (String) The sqlserver version used for the instance.
-
-<a id="nestedatt--encryption"></a>
-### Nested Schema for `encryption`
-
-Read-Only:
-
-- `kek_key_id` (String) The key identifier
-- `kek_key_ring_id` (String) The keyring identifier
-- `kek_key_version` (String) The key version
-- `service_account` (String)
-
-
-<a id="nestedatt--network"></a>
-### Nested Schema for `network`
-
-Read-Only:
-
-- `access_scope` (String) The network access scope of the instance
-
-⚠️ **Note:** This feature is in private preview. Supplying this object is only permitted for enabled accounts. If your account does not have access, the request will be rejected.
-- `acl` (List of String) List of IPV4 cidr.
-- `instance_address` (String)
-- `router_address` (String)
-
-
-<a id="nestedatt--storage"></a>
-### Nested Schema for `storage`
-
-Read-Only:
-
-- `class` (String) The storage class for the storage.
-- `size` (Number) The storage size in Gigabytes.

docs/data-sources/sqlserverflexbeta_user.md

@@ -1,54 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexbeta_user Data Source - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexbeta_user (Data Source)
-
-
-
-
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Optional
-
-- `page` (Number) Number of the page of items list to be returned.
-- `size` (Number) Number of items to be returned on each page.
-- `sort` (String) Sorting of the users to be returned on each page.
-
-### Read-Only
-
-- `pagination` (Attributes) (see [below for nested schema](#nestedatt--pagination))
-- `users` (Attributes List) List of all users inside an instance (see [below for nested schema](#nestedatt--users))
-
-<a id="nestedatt--pagination"></a>
-### Nested Schema for `pagination`
-
-Read-Only:
-
-- `page` (Number)
-- `size` (Number)
-- `sort` (String)
-- `total_pages` (Number)
-- `total_rows` (Number)
-
-
-<a id="nestedatt--users"></a>
-### Nested Schema for `users`
-
-Read-Only:
-
-- `status` (String) The current status of the user.
-- `tf_original_api_id` (Number) The ID of the user.
-- `username` (String) The name of the user.

docs/index.md

@@ -16,13 +16,14 @@ provider "stackitprivatepreview" {
   default_region = "eu01"
 }
 
-provider "stackitprivatepreview" {
-  default_region           = "eu01"
-  service_account_key_path = "service_account.json"
-}
-
 # Authentication
 
+# Token flow (scheduled for deprecation and will be removed on December 17, 2025)
+provider "stackitprivatepreview" {
+  default_region        = "eu01"
+  service_account_token = var.service_account_token
+}
+
 # Key flow
 provider "stackitprivatepreview" {
   default_region      = "eu01"

docs/resources/postgresflexalpha_database.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_postgresflexalpha_database Resource - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  Postgres Flex database resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_postgresflexalpha_database (Resource)
 
-
+Postgres Flex database resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -25,16 +25,6 @@ import {
   to = stackitprivatepreview_postgresflexalpha_database.import-example
   id = "${var.project_id},${var.region},${var.postgres_instance_id},${var.postgres_database_id}"
 }
-
-import {
-  to = stackitprivatepreview_postgresflexalpha_database.import-example
-  identity = {
-    project_id  = "project_id"
-    region      = "region"
-    instance_id = "instance_id"
-    database_id = "database_id"
-  }
-}
 ```
 
 <!-- schema generated by tfplugindocs -->
@@ -42,16 +32,16 @@ import {
 
 ### Required
 
-- `name` (String) The name of the database.
+- `instance_id` (String) ID of the Postgres Flex instance.
+- `name` (String) Database name.
+- `owner` (String) Username of the database owner.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
 
 ### Optional
 
-- `database_id` (Number) The ID of the database.
-- `instance_id` (String) The ID of the instance.
-- `owner` (String) The owner of the database.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `id` (Number) The id of the database.
+- `database_id` (Number) Database ID.
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`,`database_id`".

docs/resources/postgresflexalpha_instance.md

@@ -3,39 +3,31 @@
 page_title: "stackitprivatepreview_postgresflexalpha_instance Resource - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  Postgres Flex instance resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_postgresflexalpha_instance (Resource)
 
-
+Postgres Flex instance resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
 ```terraform
-resource "stackitprivatepreview_postgresflexalpha_instance" "example-instance" {
+resource "stackitprivatepreview_postgresflexalpha_instance" "example" {
   project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
   name            = "example-instance"
   acl             = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-  backup_schedule = "0 0 * * *"
-  retention_days  = 30
-  flavor_id       = "flavor.id"
-  replicas        = 1
+  backup_schedule = "00 00 * * *"
+  flavor = {
+    cpu = 2
+    ram = 4
+  }
+  replicas = 3
   storage = {
-    performance_class = "premium-perf2-stackit"
-    size              = 10
+    class = "class"
+    size  = 5
   }
-  encryption = {
-    kek_key_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_ring_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_version = 1
-    service_account = "service@account.email"
-  }
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "PUBLIC"
-  }
-  version = 17
+  version = 14
 }
 
 # Only use the import statement, if you want to import an existing postgresflex instance
@@ -43,15 +35,6 @@ import {
   to = stackitprivatepreview_postgresflexalpha_instance.import-example
   id = "${var.project_id},${var.region},${var.postgres_instance_id}"
 }
-
-import {
-  to = stackitprivatepreview_postgresflexalpha_instance.import-example
-  identity = {
-    project_id  = var.project_id
-    region      = var.region
-    instance_id = var.postgres_instance_id
-  }
-}
 ```
 
 <!-- schema generated by tfplugindocs -->
@@ -59,47 +42,49 @@ import {
 
 ### Required
 
-- `backup_schedule` (String) The schedule for when the database backup will be created. Currently, ONLY daily schedules are supported (every 24 hours). The schedule is written as a cron schedule.
-- `flavor_id` (String) The id of the instance flavor.
-- `name` (String) The name of the instance.
-- `network` (Attributes) The access configuration of the instance (see [below for nested schema](#nestedatt--network))
-- `replicas` (Number) How many replicas the instance should have.
-- `retention_days` (Number) How long backups are retained. The value can only be between 32 and 365 days.
-- `storage` (Attributes) The object containing information about the storage size and class. (see [below for nested schema](#nestedatt--storage))
-- `version` (String) The Postgres version used for the instance. See [Versions Endpoint](/documentation/postgres-flex-service/version/v3alpha1#tag/Version) for supported version parameters.
+- `backup_schedule` (String)
+- `encryption` (Attributes) The encryption block. (see [below for nested schema](#nestedatt--encryption))
+- `flavor_id` (String)
+- `name` (String) Instance name.
+- `network` (Attributes) The network block configuration. (see [below for nested schema](#nestedatt--network))
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+- `replicas` (Number)
+- `retention_days` (Number) The days of the retention period.
+- `storage` (Attributes) (see [below for nested schema](#nestedatt--storage))
+- `version` (String) The database version used.
 
 ### Optional
 
-- `encryption` (Attributes) The configuration for instance's volume and backup storage encryption.
-
-⚠︝ **Note:** This feature is in private preview. Supplying this object is only permitted for enabled accounts. If your account does not have access, the request will be rejected. (see [below for nested schema](#nestedatt--encryption))
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `acl` (List of String) List of IPV4 cidr.
-- `connection_info` (Attributes) The connection information of the instance (see [below for nested schema](#nestedatt--connection_info))
-- `id` (String) The ID of the instance.
-- `is_deletable` (Boolean) Whether the instance can be deleted or not.
-- `status` (String) The current status of the instance.
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`".
+- `instance_id` (String) ID of the PostgresFlex instance.
+
+<a id="nestedatt--encryption"></a>
+### Nested Schema for `encryption`
+
+Required:
+
+- `key_id` (String) Key ID of the encryption key.
+- `key_version` (String) Key version of the encryption key.
+- `keyring_id` (String) KeyRing ID of the encryption key.
+- `service_account` (String) The service account ID of the service account.
+
 
 <a id="nestedatt--network"></a>
 ### Nested Schema for `network`
 
 Required:
 
-- `acl` (List of String) List of IPV4 cidr.
+- `acl` (List of String) The Access Control List (ACL) for the PostgresFlex instance.
 
 Optional:
 
-- `access_scope` (String) The access scope of the instance. It defines if the instance is public or airgapped.
-
-Read-Only:
-
-- `instance_address` (String)
-- `router_address` (String)
+- `access_scope` (String) The access scope. (Either SNA or PUBLIC)
+- `instance_address` (String) The returned instance address.
+- `router_address` (String) The returned router address.
 
 
 <a id="nestedatt--storage"></a>
@@ -107,32 +92,5 @@ Read-Only:
 
 Required:
 
-- `performance_class` (String) The storage class for the storage.
-- `size` (Number) The storage size in Gigabytes.
-
-
-<a id="nestedatt--encryption"></a>
-### Nested Schema for `encryption`
-
-Required:
-
-- `kek_key_id` (String) The encryption-key key identifier
-- `kek_key_ring_id` (String) The encryption-key keyring identifier
-- `kek_key_version` (String) The encryption-key version
-- `service_account` (String)
-
-
-<a id="nestedatt--connection_info"></a>
-### Nested Schema for `connection_info`
-
-Read-Only:
-
-- `write` (Attributes) The DNS name and port in the instance overview (see [below for nested schema](#nestedatt--connection_info--write))
-
-<a id="nestedatt--connection_info--write"></a>
-### Nested Schema for `connection_info.write`
-
-Read-Only:
-
-- `host` (String) The host of the instance.
-- `port` (Number) The port of the instance.
+- `class` (String) The storage class used.
+- `size` (Number) The disk size of the storage.

docs/resources/postgresflexalpha_user.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_postgresflexalpha_user Resource - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  Postgres Flex user resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_postgresflexalpha_user (Resource)
 
-
+Postgres Flex user resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -16,7 +16,7 @@ description: |-
 resource "stackitprivatepreview_postgresflexalpha_user" "example" {
   project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
   instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name        = "username"
+  username    = "username"
   roles       = ["role"]
 }
 
@@ -25,16 +25,6 @@ import {
   to = stackitprivatepreview_postgresflexalpha_user.import-example
   id = "${var.project_id},${var.region},${var.postgres_instance_id},${var.user_id}"
 }
-
-import {
-  to = stackitprivatepreview_postgresflexalpha_user.import-example
-  identity = {
-    project_id  = "project.id"
-    region      = "region"
-    instance_id = "instance.id"
-    user_id     = "user.id"
-  }
-}
 ```
 
 <!-- schema generated by tfplugindocs -->
@@ -42,18 +32,19 @@ import {
 
 ### Required
 
-- `name` (String) The name of the user.
+- `instance_id` (String) ID of the PostgresFlex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+- `roles` (Set of String) Database access levels for the user. Possible values are: `login`, `createdb`.
+- `username` (String)
 
 ### Optional
 
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-- `roles` (List of String) A list containing the user roles for the instance.
-- `user_id` (Number) The ID of the user.
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 
-- `id` (Number) The ID of the user.
-- `password` (String) The password for the user.
-- `status` (String) The current status of the user.
+- `connection_string` (String)
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`,`user_id`".
+- `password` (String, Sensitive)
+- `status` (String)
+- `user_id` (Number) User ID.

docs/resources/sqlserverflexalpha_database.md

@@ -1,63 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexalpha_database Resource - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexalpha_database (Resource)
-
-
-
-## Example Usage
-
-```terraform
-resource "stackitprivatepreview_sqlserverflexalpha_database" "example" {
-  project_id    = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id   = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  collation     = ""
-  compatibility = "160"
-  name          = ""
-  owner         = ""
-}
-
-# Only use the import statement, if you want to import a existing sqlserverflex database
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_database.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id},${var.sql_user_id}"
-}
-
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_database.import-example
-  identity = {
-    project_id  = "project.id"
-    region      = "region"
-    instance_id = "instance.id"
-    database_id = "database.id"
-  }
-}
-```
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `name` (String) The name of the database.
-- `owner` (String) The owner of the database.
-
-### Optional
-
-- `collation` (String) The collation of the database. This database collation should match the *collation_name* of one of the collations given by the **Get database collation list** endpoint.
-- `compatibility` (Number) CompatibilityLevel of the Database.
-- `database_name` (String) The name of the database.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Read-Only
-
-- `collation_name` (String) The collation of the database. This database collation should match the *collation_name* of one of the collations given by the **Get database collation list** endpoint.
-- `compatibility_level` (Number) CompatibilityLevel of the Database.
-- `id` (Number) The id of the database.

docs/resources/sqlserverflexalpha_instance.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_sqlserverflexalpha_instance Resource - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  SQLServer Flex ALPHA instance resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_sqlserverflexalpha_instance (Resource)
 
-
+SQLServer Flex ALPHA instance resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -41,63 +41,58 @@ import {
 
 ### Required
 
-- `backup_schedule` (String) The schedule for on what time and how often the database backup will be created. The schedule is written as a cron schedule.
-- `flavor_id` (String) The id of the instance flavor.
-- `name` (String) The name of the instance.
-- `network` (Attributes) the network configuration of the instance. (see [below for nested schema](#nestedatt--network))
-- `retention_days` (Number) The days for how long the backup files should be stored before cleaned up. 30 to 365
-- `storage` (Attributes) The object containing information about the storage size and class. (see [below for nested schema](#nestedatt--storage))
-- `version` (String) The sqlserver version used for the instance.
+- `encryption` (Attributes) The encryption block. (see [below for nested schema](#nestedatt--encryption))
+- `flavor_id` (String)
+- `name` (String) Instance name.
+- `network` (Attributes) The network block. (see [below for nested schema](#nestedatt--network))
+- `project_id` (String) STACKIT project ID to which the instance is associated.
 
 ### Optional
 
-- `encryption` (Attributes) this defines which key to use for storage encryption (see [below for nested schema](#nestedatt--encryption))
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
+- `backup_schedule` (String) The backup schedule. Should follow the cron scheduling system format (e.g. "0 0 * * *")
+- `is_deletable` (Boolean)
+- `region` (String) The resource region. If not defined, the provider region is used.
+- `retention_days` (Number)
+- `status` (String)
+- `storage` (Attributes) (see [below for nested schema](#nestedatt--storage))
+- `version` (String)
 
 ### Read-Only
 
-- `edition` (String) Edition of the MSSQL server instance
-- `id` (String) The ID of the instance.
-- `is_deletable` (Boolean) Whether the instance can be deleted or not.
-- `replicas` (Number) How many replicas the instance should have.
-- `status` (String)
-
-<a id="nestedatt--network"></a>
-### Nested Schema for `network`
-
-Required:
-
-- `acl` (List of String) List of IPV4 cidr.
-
-Optional:
-
-- `access_scope` (String) The network access scope of the instance
-
-⚠️ **Note:** This feature is in private preview. Supplying this object is only permitted for enabled accounts. If your account does not have access, the request will be rejected.
-
-Read-Only:
-
-- `instance_address` (String)
-- `router_address` (String)
-
-
-<a id="nestedatt--storage"></a>
-### Nested Schema for `storage`
-
-Required:
-
-- `class` (String) The storage class for the storage.
-- `size` (Number) The storage size in Gigabytes.
-
+- `edition` (String)
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`".
+- `instance_id` (String) ID of the SQLServer Flex instance.
+- `replicas` (Number)
 
 <a id="nestedatt--encryption"></a>
 ### Nested Schema for `encryption`
 
 Required:
 
-- `kek_key_id` (String) The key identifier
-- `kek_key_ring_id` (String) The keyring identifier
-- `kek_key_version` (String) The key version
+- `key_id` (String) STACKIT KMS - Key ID of the encryption key to use.
+- `key_version` (String) STACKIT KMS - Key version to use in the encryption key.
+- `keyring_id` (String) STACKIT KMS - KeyRing ID of the encryption key to use.
 - `service_account` (String)
+
+
+<a id="nestedatt--network"></a>
+### Nested Schema for `network`
+
+Required:
+
+- `access_scope` (String) The access scope of the instance. (SNA | PUBLIC)
+- `acl` (List of String) The Access Control List (ACL) for the SQLServer Flex instance.
+
+Read-Only:
+
+- `instance_address` (String) The returned instance IP address of the SQLServer Flex instance.
+- `router_address` (String) The returned router IP address of the SQLServer Flex instance.
+
+
+<a id="nestedatt--storage"></a>
+### Nested Schema for `storage`
+
+Optional:
+
+- `class` (String)
+- `size` (Number)

docs/resources/sqlserverflexalpha_user.md

@@ -3,12 +3,12 @@
 page_title: "stackitprivatepreview_sqlserverflexalpha_user Resource - stackitprivatepreview"
 subcategory: ""
 description: |-
-  
+  SQLServer Flex user resource schema. Must have a region specified in the provider configuration.
 ---
 
 # stackitprivatepreview_sqlserverflexalpha_user (Resource)
 
-
+SQLServer Flex user resource schema. Must have a `region` specified in the provider configuration.
 
 ## Example Usage
 
@@ -32,22 +32,21 @@ import {
 
 ### Required
 
-- `roles` (List of String) A list containing the user roles for the instance. A list with the valid user roles can be retrieved using the List Roles endpoint.
-- `username` (String) The name of the user.
+- `instance_id` (String) ID of the SQLServer Flex instance.
+- `project_id` (String) STACKIT project ID to which the instance is associated.
+- `roles` (Set of String) Database access levels for the user. The values for the default roles are: `##STACKIT_DatabaseManager##`, `##STACKIT_LoginManager##`, `##STACKIT_ProcessManager##`, `##STACKIT_ServerManager##`, `##STACKIT_SQLAgentManager##`, `##STACKIT_SQLAgentUser##`
+- `username` (String) Username of the SQLServer Flex instance.
 
 ### Optional
 
-- `default_database` (String) The default database for a user of the instance.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-- `user_id` (Number) The ID of the user.
+- `region` (String)
 
 ### Read-Only
 
-- `host` (String) The host of the instance in which the user belongs to.
-- `id` (Number) The ID of the user.
-- `password` (String) The password for the user.
-- `port` (Number) The port of the instance in which the user belongs to.
-- `status` (String) The current status of the user.
-- `uri` (String) The connection string for the user to the instance.
+- `default_database` (String)
+- `host` (String)
+- `id` (String) Terraform's internal resource ID. It is structured as "`project_id`,`region`,`instance_id`,`user_id`".
+- `password` (String, Sensitive) Password of the user account.
+- `port` (Number)
+- `status` (String)
+- `user_id` (Number) User ID.

docs/resources/sqlserverflexbeta_database.md

@@ -1,51 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexbeta_database Resource - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexbeta_database (Resource)
-
-
-
-## Example Usage
-
-```terraform
-resource "stackitprivatepreview_sqlserverflexalpha_user" "example" {
-  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  username    = "username"
-  roles       = ["role"]
-}
-
-# Only use the import statement, if you want to import an existing sqlserverflex user
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_user.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id},${var.sql_user_id}"
-}
-```
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `name` (String) The name of the database.
-- `owner` (String) The owner of the database.
-
-### Optional
-
-- `collation` (String) The collation of the database. This database collation should match the *collation_name* of one of the collations given by the **Get database collation list** endpoint.
-- `compatibility` (Number) CompatibilityLevel of the Database.
-- `database_name` (String) The name of the database.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Read-Only
-
-- `collation_name` (String) The collation of the database. This database collation should match the *collation_name* of one of the collations given by the **Get database collation list** endpoint.
-- `compatibility_level` (Number) CompatibilityLevel of the Database.
-- `id` (Number) The id of the database.

docs/resources/sqlserverflexbeta_instance.md

@@ -1,158 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexbeta_instance Resource - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexbeta_instance (Resource)
-
-
-
-## Example Usage
-
-```terraform
-# without encryption and SNA
-resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
-  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name            = "example-instance"
-  backup_schedule = "0 3 * * *"
-  retention_days  = 31
-  flavor_id       = "flavor_id"
-  storage = {
-    class = "premium-perf2-stackit"
-    size  = 50
-  }
-  version = 2022
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "SNA"
-  }
-}
-
-# without encryption and PUBLIC
-resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
-  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name            = "example-instance"
-  backup_schedule = "0 3 * * *"
-  retention_days  = 31
-  flavor_id       = "flavor_id"
-  storage = {
-    class = "premium-perf2-stackit"
-    size  = 50
-  }
-  version = 2022
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "PUBLIC"
-  }
-}
-
-# with encryption and SNA
-resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
-  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name            = "example-instance"
-  backup_schedule = "0 3 * * *"
-  retention_days  = 31
-  flavor_id       = "flavor_id"
-  storage = {
-    class = "premium-perf2-stackit"
-    size  = 50
-  }
-  version = 2022
-  encryption = {
-    kek_key_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_ring_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_version = 1
-    service_account = "service_account@email"
-  }
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "SNA"
-  }
-}
-
-
-# Only use the import statement, if you want to import an existing sqlserverflex instance
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_instance.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id}"
-}
-
-# import with identity
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_instance.import-example
-  identity = {
-    project_id  = var.project_id
-    region      = var.region
-    instance_id = var.sql_instance_id
-  }
-}
-```
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `backup_schedule` (String) The schedule for on what time and how often the database backup will be created. The schedule is written as a cron schedule.
-- `flavor_id` (String) The id of the instance flavor.
-- `name` (String) The name of the instance.
-- `network` (Attributes) the network configuration of the instance. (see [below for nested schema](#nestedatt--network))
-- `retention_days` (Number) The days for how long the backup files should be stored before cleaned up. 30 to 365
-- `storage` (Attributes) The object containing information about the storage size and class. (see [below for nested schema](#nestedatt--storage))
-- `version` (String) The sqlserver version used for the instance.
-
-### Optional
-
-- `encryption` (Attributes) this defines which key to use for storage encryption (see [below for nested schema](#nestedatt--encryption))
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-
-### Read-Only
-
-- `edition` (String) Edition of the MSSQL server instance
-- `id` (String) The ID of the instance.
-- `is_deletable` (Boolean) Whether the instance can be deleted or not.
-- `replicas` (Number) How many replicas the instance should have.
-- `status` (String)
-
-<a id="nestedatt--network"></a>
-### Nested Schema for `network`
-
-Required:
-
-- `acl` (List of String) List of IPV4 cidr.
-
-Optional:
-
-- `access_scope` (String) The network access scope of the instance
-
-⚠️ **Note:** This feature is in private preview. Supplying this object is only permitted for enabled accounts. If your account does not have access, the request will be rejected.
-
-Read-Only:
-
-- `instance_address` (String)
-- `router_address` (String)
-
-
-<a id="nestedatt--storage"></a>
-### Nested Schema for `storage`
-
-Required:
-
-- `class` (String) The storage class for the storage.
-- `size` (Number) The storage size in Gigabytes.
-
-
-<a id="nestedatt--encryption"></a>
-### Nested Schema for `encryption`
-
-Required:
-
-- `kek_key_id` (String) The key identifier
-- `kek_key_ring_id` (String) The keyring identifier
-- `kek_key_version` (String) The key version
-- `service_account` (String)

docs/resources/sqlserverflexbeta_user.md

@@ -1,53 +0,0 @@
----
-# generated by https://github.com/hashicorp/terraform-plugin-docs
-page_title: "stackitprivatepreview_sqlserverflexbeta_user Resource - stackitprivatepreview"
-subcategory: ""
-description: |-
-  
----
-
-# stackitprivatepreview_sqlserverflexbeta_user (Resource)
-
-
-
-## Example Usage
-
-```terraform
-resource "stackitprivatepreview_sqlserverflexalpha_user" "example" {
-  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  username    = "username"
-  roles       = ["role"]
-}
-
-# Only use the import statement, if you want to import an existing sqlserverflex user
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_user.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id},${var.sql_user_id}"
-}
-```
-
-<!-- schema generated by tfplugindocs -->
-## Schema
-
-### Required
-
-- `roles` (List of String) A list containing the user roles for the instance. A list with the valid user roles can be retrieved using the List Roles endpoint.
-- `username` (String) The name of the user.
-
-### Optional
-
-- `default_database` (String) The default database for a user of the instance.
-- `instance_id` (String) The ID of the instance.
-- `project_id` (String) The STACKIT project ID.
-- `region` (String) The region which should be addressed
-- `user_id` (Number) The ID of the user.
-
-### Read-Only
-
-- `host` (String) The host of the instance in which the user belongs to.
-- `id` (Number) The ID of the user.
-- `password` (String) The password for the user.
-- `port` (Number) The port of the instance in which the user belongs to.
-- `status` (String) The current status of the user.
-- `uri` (String) The connection string for the user to the instance.

examples/data-sources/stackitprivatepreview_postgresflexalpha_flavor/data-source.tf

@@ -1,8 +0,0 @@
-data "stackitprivatepreview_postgresflexalpha_flavor" "flavor" {
-  project_id    = var.project_id
-  region        = var.region
-  cpu           = 4
-  ram           = 16
-  node_type     = "Single"
-  storage_class = "premium-perf2-stackit"
-}

examples/data-sources/stackitprivatepreview_sqlserverflexalpha_flavor/data-source.tf

@@ -1,8 +0,0 @@
-data "stackitprivatepreview_sqlserverflexalpha_flavor" "flavor" {
-  project_id    = var.project_id
-  region        = var.region
-  cpu           = 4
-  ram           = 16
-  node_type     = "Single"
-  storage_class = "premium-perf2-stackit"
-}

examples/data-sources/stackitprivatepreview_sqlserverflexbeta_database/data-source.tf

@@ -1,5 +0,0 @@
-data "stackitprivatepreview_sqlserverflexbeta_database" "example" {
-  project_id    = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id   = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  database_name = "dbname"
-}

examples/data-sources/stackitprivatepreview_sqlserverflexbeta_flavor/data-source.tf

@@ -1,8 +0,0 @@
-data "stackitprivatepreview_sqlserverflexbeta_flavor" "flavor" {
-  project_id    = var.project_id
-  region        = var.region
-  cpu           = 4
-  ram           = 16
-  node_type     = "Single"
-  storage_class = "premium-perf2-stackit"
-}

examples/data-sources/stackitprivatepreview_sqlserverflexbeta_instance/data-source.tf

@@ -1,4 +0,0 @@
-data "stackitprivatepreview_sqlserverflexbeta_instance" "example" {
-  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-}

examples/provider/provider.tf

@@ -2,13 +2,14 @@ provider "stackitprivatepreview" {
   default_region = "eu01"
 }
 
-provider "stackitprivatepreview" {
-  default_region           = "eu01"
-  service_account_key_path = "service_account.json"
-}
-
 # Authentication
 
+# Token flow (scheduled for deprecation and will be removed on December 17, 2025)
+provider "stackitprivatepreview" {
+  default_region        = "eu01"
+  service_account_token = var.service_account_token
+}
+
 # Key flow
 provider "stackitprivatepreview" {
   default_region      = "eu01"
@@ -22,3 +23,4 @@ provider "stackitprivatepreview" {
   service_account_key_path = var.service_account_key_path
   private_key_path         = var.private_key_path
 }
+

examples/resources/stackitprivatepreview_postgresflexalpha_database/resource.tf

@@ -9,14 +9,4 @@ resource "stackitprivatepreview_postgresflexalpha_database" "example" {
 import {
   to = stackitprivatepreview_postgresflexalpha_database.import-example
   id = "${var.project_id},${var.region},${var.postgres_instance_id},${var.postgres_database_id}"
-}
-
-import {
-  to = stackitprivatepreview_postgresflexalpha_database.import-example
-  identity = {
-    project_id  = "project_id"
-    region      = "region"
-    instance_id = "instance_id"
-    database_id = "database_id"
-  }
-}
+}

examples/resources/stackitprivatepreview_postgresflexalpha_instance/resource.tf

@@ -1,39 +1,22 @@
-resource "stackitprivatepreview_postgresflexalpha_instance" "example-instance" {
+resource "stackitprivatepreview_postgresflexalpha_instance" "example" {
   project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
   name            = "example-instance"
   acl             = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-  backup_schedule = "0 0 * * *"
-  retention_days  = 30
-  flavor_id       = "flavor.id"
-  replicas        = 1
+  backup_schedule = "00 00 * * *"
+  flavor = {
+    cpu = 2
+    ram = 4
+  }
+  replicas = 3
   storage = {
-    performance_class = "premium-perf2-stackit"
-    size              = 10
+    class = "class"
+    size  = 5
   }
-  encryption = {
-    kek_key_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_ring_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_version = 1
-    service_account = "service@account.email"
-  }
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "PUBLIC"
-  }
-  version = 17
+  version = 14
 }
 
 # Only use the import statement, if you want to import an existing postgresflex instance
 import {
   to = stackitprivatepreview_postgresflexalpha_instance.import-example
   id = "${var.project_id},${var.region},${var.postgres_instance_id}"
-}
-
-import {
-  to = stackitprivatepreview_postgresflexalpha_instance.import-example
-  identity = {
-    project_id  = var.project_id
-    region      = var.region
-    instance_id = var.postgres_instance_id
-  }
-}
+}

examples/resources/stackitprivatepreview_postgresflexalpha_user/resource.tf

@@ -1,7 +1,7 @@
 resource "stackitprivatepreview_postgresflexalpha_user" "example" {
   project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
   instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name        = "username"
+  username    = "username"
   roles       = ["role"]
 }
 
@@ -9,14 +9,4 @@ resource "stackitprivatepreview_postgresflexalpha_user" "example" {
 import {
   to = stackitprivatepreview_postgresflexalpha_user.import-example
   id = "${var.project_id},${var.region},${var.postgres_instance_id},${var.user_id}"
-}
-
-import {
-  to = stackitprivatepreview_postgresflexalpha_user.import-example
-  identity = {
-    project_id  = "project.id"
-    region      = "region"
-    instance_id = "instance.id"
-    user_id     = "user.id"
-  }
-}
+}

examples/resources/stackitprivatepreview_sqlserverflexalpha_database/resource.tf

@@ -1,24 +0,0 @@
-resource "stackitprivatepreview_sqlserverflexalpha_database" "example" {
-  project_id    = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id   = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  collation     = ""
-  compatibility = "160"
-  name          = ""
-  owner         = ""
-}
-
-# Only use the import statement, if you want to import a existing sqlserverflex database
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_database.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id},${var.sql_user_id}"
-}
-
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_database.import-example
-  identity = {
-    project_id  = "project.id"
-    region      = "region"
-    instance_id = "instance.id"
-    database_id = "database.id"
-  }
-}

examples/resources/stackitprivatepreview_sqlserverflexbeta_database/resource.tf

@@ -1,12 +0,0 @@
-resource "stackitprivatepreview_sqlserverflexalpha_user" "example" {
-  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  username    = "username"
-  roles       = ["role"]
-}
-
-# Only use the import statement, if you want to import an existing sqlserverflex user
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_user.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id},${var.sql_user_id}"
-}

examples/resources/stackitprivatepreview_sqlserverflexbeta_instance/resource.tf

@@ -1,76 +0,0 @@
-# without encryption and SNA
-resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
-  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name            = "example-instance"
-  backup_schedule = "0 3 * * *"
-  retention_days  = 31
-  flavor_id       = "flavor_id"
-  storage = {
-    class = "premium-perf2-stackit"
-    size  = 50
-  }
-  version = 2022
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "SNA"
-  }
-}
-
-# without encryption and PUBLIC
-resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
-  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name            = "example-instance"
-  backup_schedule = "0 3 * * *"
-  retention_days  = 31
-  flavor_id       = "flavor_id"
-  storage = {
-    class = "premium-perf2-stackit"
-    size  = 50
-  }
-  version = 2022
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "PUBLIC"
-  }
-}
-
-# with encryption and SNA
-resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
-  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  name            = "example-instance"
-  backup_schedule = "0 3 * * *"
-  retention_days  = 31
-  flavor_id       = "flavor_id"
-  storage = {
-    class = "premium-perf2-stackit"
-    size  = 50
-  }
-  version = 2022
-  encryption = {
-    kek_key_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_ring_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-    kek_key_version = 1
-    service_account = "service_account@email"
-  }
-  network = {
-    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
-    access_scope = "SNA"
-  }
-}
-
-
-# Only use the import statement, if you want to import an existing sqlserverflex instance
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_instance.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id}"
-}
-
-# import with identity
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_instance.import-example
-  identity = {
-    project_id  = var.project_id
-    region      = var.region
-    instance_id = var.sql_instance_id
-  }
-}

examples/resources/stackitprivatepreview_sqlserverflexbeta_user/resource.tf

@@ -1,12 +0,0 @@
-resource "stackitprivatepreview_sqlserverflexalpha_user" "example" {
-  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
-  username    = "username"
-  roles       = ["role"]
-}
-
-# Only use the import statement, if you want to import an existing sqlserverflex user
-import {
-  to = stackitprivatepreview_sqlserverflexalpha_user.import-example
-  id = "${var.project_id},${var.region},${var.sql_instance_id},${var.sql_user_id}"
-}

generator/cmd/build/build.go

@@ -1,346 +0,0 @@
-package build
-
-import (
-	"errors"
-	"fmt"
-	"go/ast"
-	"go/parser"
-	"go/token"
-	"log/slog"
-	"os"
-	"os/exec"
-	"path"
-	"regexp"
-	"strings"
-)
-
-type Builder struct {
-	rootDir      string
-	SkipClone    bool
-	SkipCleanup  bool
-	PackagesOnly bool
-	Verbose      bool
-	Debug        bool
-}
-
-func (b *Builder) Build() error {
-	slog.Info("Starting Builder")
-	if b.PackagesOnly {
-		slog.Info("  >>> only generating pkg_gen <<<")
-	}
-
-	rootErr := b.determineRoot()
-	if rootErr != nil {
-		return rootErr
-	}
-
-	if !b.PackagesOnly {
-		if b.Verbose {
-			slog.Info("  ... Checking needed commands available")
-		}
-		chkErr := checkCommands([]string{})
-		if chkErr != nil {
-			return chkErr
-		}
-	}
-
-	// if !b.SkipCleanup {
-	//	slog.Info("Cleaning up old packages directory")
-	//	err := os.RemoveAll(path.Join(b.rootDir, "pkg_gen"))
-	//	if err != nil {
-	//		return err
-	//	}
-	//}
-	//
-	// if !b.SkipCleanup && !b.PackagesOnly {
-	//	slog.Info("Cleaning up old packages directory")
-	//	err := os.RemoveAll(path.Join(b.rootDir, "pkg_gen"))
-	//	if err != nil {
-	//		return err
-	//	}
-	//}
-
-	// slog.Info("Creating generator dir", "dir", fmt.Sprintf("%s/%s", *root, GEN_REPO_NAME))
-	// genDir := path.Join(*root, GEN_REPO_NAME)
-	// if !b.SkipClone {
-	//	err = createGeneratorDir(GEN_REPO, genDir, b.SkipClone)
-	//	if err != nil {
-	//		return err
-	//	}
-	//}
-
-	oasHandlerErr := b.oasHandler(path.Join(b.rootDir, "service_specs"))
-	if oasHandlerErr != nil {
-		return oasHandlerErr
-	}
-
-	// if !b.PackagesOnly {
-	//	slog.Info("Generating service boilerplate")
-	//	err = generateServiceFiles(*root, path.Join(*root, GEN_REPO_NAME))
-	//	if err != nil {
-	//		return err
-	//	}
-	//
-	//	slog.Info("Copying all service files")
-	//	err = CopyDirectory(
-	//		path.Join(*root, "generated", "internal", "services"),
-	//		path.Join(*root, "stackit", "internal", "services"),
-	//	)
-	//	if err != nil {
-	//		return err
-	//	}
-	//
-	//	err = createBoilerplate(*root, path.Join(*root, "stackit", "internal", "services"))
-	//	if err != nil {
-	//		return err
-	//	}
-	//}
-
-	// workaround to remove linter complain :D
-	if b.PackagesOnly && b.Verbose && b.SkipClone && b.SkipCleanup {
-		bpErr := createBoilerplate(b.rootDir, "boilerplate")
-		if bpErr != nil {
-			return bpErr
-		}
-	}
-
-	slog.Info("Done")
-	return nil
-}
-
-type templateData struct {
-	PackageName       string
-	PackageNameCamel  string
-	PackageNamePascal string
-	NameCamel         string
-	NamePascal        string
-	NameSnake         string
-	Fields            []string
-}
-
-func createBoilerplate(rootFolder, folder string) error {
-	services, err := os.ReadDir(folder)
-	if err != nil {
-		return err
-	}
-	for _, svc := range services {
-		if !svc.IsDir() {
-			continue
-		}
-		resources, err := os.ReadDir(path.Join(folder, svc.Name()))
-		if err != nil {
-			return err
-		}
-
-		var handleDS bool
-		var handleRes bool
-		var foundDS bool
-		var foundRes bool
-
-		for _, res := range resources {
-			if !res.IsDir() {
-				continue
-			}
-
-			resourceName := res.Name()
-
-			dsFile := path.Join(
-				folder,
-				svc.Name(),
-				res.Name(),
-				"datasources_gen",
-				fmt.Sprintf("%s_data_source_gen.go", res.Name()),
-			)
-			handleDS = FileExists(dsFile)
-
-			resFile := path.Join(
-				folder,
-				svc.Name(),
-				res.Name(),
-				"resources_gen",
-				fmt.Sprintf("%s_resource_gen.go", res.Name()),
-			)
-			handleRes = FileExists(resFile)
-
-			dsGoFile := path.Join(folder, svc.Name(), res.Name(), "datasource.go")
-			foundDS = FileExists(dsGoFile)
-
-			resGoFile := path.Join(folder, svc.Name(), res.Name(), "resource.go")
-			foundRes = FileExists(resGoFile)
-
-			if handleDS && !foundDS {
-				slog.Info("  creating missing datasource.go", "service", svc.Name(), "resource", resourceName)
-				if !ValidateSnakeCase(resourceName) {
-					return errors.New("resource name is invalid")
-				}
-
-				fields, tokenErr := getTokens(dsFile)
-				if tokenErr != nil {
-					return fmt.Errorf("error reading tokens: %w", tokenErr)
-				}
-
-				tplName := "data_source_scaffold.gotmpl"
-				err = writeTemplateToFile(
-					tplName,
-					path.Join(rootFolder, "cmd", "cmd", "build", "templates", tplName),
-					dsGoFile,
-					&templateData{
-						PackageName:       svc.Name(),
-						PackageNameCamel:  ToCamelCase(svc.Name()),
-						PackageNamePascal: ToPascalCase(svc.Name()),
-						NameCamel:         ToCamelCase(resourceName),
-						NamePascal:        ToPascalCase(resourceName),
-						NameSnake:         resourceName,
-						Fields:            fields,
-					},
-				)
-				if err != nil {
-					panic(err)
-				}
-			}
-
-			if handleRes && !foundRes {
-				slog.Info("  creating missing resource.go", "service", svc.Name(), "resource", resourceName)
-				if !ValidateSnakeCase(resourceName) {
-					return errors.New("resource name is invalid")
-				}
-
-				fields, tokenErr := getTokens(resFile)
-				if tokenErr != nil {
-					return fmt.Errorf("error reading tokens: %w", tokenErr)
-				}
-
-				tplName := "resource_scaffold.gotmpl"
-				err = writeTemplateToFile(
-					tplName,
-					path.Join(rootFolder, "cmd", "cmd", "build", "templates", tplName),
-					resGoFile,
-					&templateData{
-						PackageName:       svc.Name(),
-						PackageNameCamel:  ToCamelCase(svc.Name()),
-						PackageNamePascal: ToPascalCase(svc.Name()),
-						NameCamel:         ToCamelCase(resourceName),
-						NamePascal:        ToPascalCase(resourceName),
-						NameSnake:         resourceName,
-						Fields:            fields,
-					},
-				)
-				if err != nil {
-					return err
-				}
-
-				if !FileExists(path.Join(folder, svc.Name(), res.Name(), "functions.go")) {
-					slog.Info("  creating missing functions.go", "service", svc.Name(), "resource", resourceName)
-					if !ValidateSnakeCase(resourceName) {
-						return errors.New("resource name is invalid")
-					}
-					fncTplName := "functions_scaffold.gotmpl"
-					err = writeTemplateToFile(
-						fncTplName,
-						path.Join(rootFolder, "cmd", "cmd", "build", "templates", fncTplName),
-						path.Join(folder, svc.Name(), res.Name(), "functions.go"),
-						&templateData{
-							PackageName:       svc.Name(),
-							PackageNameCamel:  ToCamelCase(svc.Name()),
-							PackageNamePascal: ToPascalCase(svc.Name()),
-							NameCamel:         ToCamelCase(resourceName),
-							NamePascal:        ToPascalCase(resourceName),
-							NameSnake:         resourceName,
-						},
-					)
-					if err != nil {
-						return err
-					}
-				}
-			}
-		}
-	}
-	return nil
-}
-
-func handleLine(line string) (string, error) {
-	schemaRegex := regexp.MustCompile(`(\s+")(id)(": schema.[a-zA-Z0-9]+Attribute{)`)
-
-	schemaMatches := schemaRegex.FindAllStringSubmatch(line, -1)
-	if schemaMatches != nil {
-		return fmt.Sprintf("%stf_original_api_id%s", schemaMatches[0][1], schemaMatches[0][3]), nil
-	}
-
-	modelRegex := regexp.MustCompile(`(\s+Id\s+types.[a-zA-Z0-9]+\s+.tfsdk:")(id)(".)`)
-	modelMatches := modelRegex.FindAllStringSubmatch(line, -1)
-	if modelMatches != nil {
-		return fmt.Sprintf("%stf_original_api_id%s", modelMatches[0][1], modelMatches[0][3]), nil
-	}
-
-	return line, nil
-}
-
-func (b *Builder) determineRoot() error {
-	cmd := exec.Command("git", "rev-parse", "--show-toplevel")
-	out, err := cmd.Output()
-	if err != nil {
-		return err
-	}
-	lines := strings.Split(string(out), "\n")
-	if lines[0] == "" {
-		return fmt.Errorf("unable to determine root directory from git")
-	}
-	b.rootDir = lines[0]
-	if b.Verbose {
-		slog.Info("  ... using root", "dir", b.rootDir)
-	}
-
-	return nil
-}
-
-// func createGeneratorDir(repoUrl, targetDir string, skipClone bool) error {
-//	if !skipClone {
-//		if FileExists(targetDir) {
-//			remErr := os.RemoveAll(targetDir)
-//			if remErr != nil {
-//				return remErr
-//			}
-//		}
-//		_, cloneErr := git.Clone(
-//			clone.Repository(repoUrl),
-//			clone.Directory(targetDir),
-//		)
-//		if cloneErr != nil {
-//			return cloneErr
-//		}
-//	}
-//	return nil
-//}
-
-func getTokens(fileName string) ([]string, error) {
-	fset := token.NewFileSet()
-
-	var result []string
-
-	node, err := parser.ParseFile(fset, fileName, nil, parser.ParseComments)
-	if err != nil {
-		return nil, err
-	}
-
-	ast.Inspect(
-		node, func(n ast.Node) bool {
-			// Suche nach Typ-Deklarationen (structs)
-			ts, ok := n.(*ast.TypeSpec)
-			if ok {
-				if strings.Contains(ts.Name.Name, "Model") {
-					ast.Inspect(
-						ts, func(sn ast.Node) bool {
-							tts, tok := sn.(*ast.Field)
-							if tok {
-								result = append(result, tts.Names[0].String())
-							}
-							return true
-						},
-					)
-				}
-			}
-			return true
-		},
-	)
-	return result, nil
-}

generator/cmd/build/copy.go

@@ -1,131 +0,0 @@
-package build
-
-import (
-	"fmt"
-	"io"
-	"log/slog"
-	"os"
-	"path/filepath"
-	"syscall"
-)
-
-// Source - https://stackoverflow.com/a
-// Posted by Oleg Neumyvakin, modified by community. See post 'Timeline' for change history
-// Retrieved 2026-01-20, License - CC BY-SA 4.0
-
-func CopyDirectory(scrDir, dest string) error {
-	entries, err := os.ReadDir(scrDir)
-	if err != nil {
-		return err
-	}
-	for _, entry := range entries {
-		sourcePath := filepath.Join(scrDir, entry.Name())
-		destPath := filepath.Join(dest, entry.Name())
-
-		fileInfo, err := os.Stat(sourcePath)
-		if err != nil {
-			return err
-		}
-
-		stat, ok := fileInfo.Sys().(*syscall.Stat_t)
-		if !ok {
-			return fmt.Errorf("failed to get raw syscall.Stat_t data for '%s'", sourcePath)
-		}
-
-		switch fileInfo.Mode() & os.ModeType {
-		case os.ModeDir:
-			if err := CreateIfNotExists(destPath, 0o755); err != nil {
-				return err
-			}
-			if err := CopyDirectory(sourcePath, destPath); err != nil {
-				return err
-			}
-		case os.ModeSymlink:
-			if err := CopySymLink(sourcePath, destPath); err != nil {
-				return err
-			}
-		default:
-			if err := Copy(sourcePath, destPath); err != nil {
-				return err
-			}
-		}
-
-		if err := os.Lchown(destPath, int(stat.Uid), int(stat.Gid)); err != nil {
-			return err
-		}
-
-		fInfo, err := entry.Info()
-		if err != nil {
-			return err
-		}
-
-		isSymlink := fInfo.Mode()&os.ModeSymlink != 0
-		if !isSymlink {
-			if err := os.Chmod(destPath, fInfo.Mode()); err != nil {
-				return err
-			}
-		}
-	}
-	return nil
-}
-
-func Copy(srcFile, dstFile string) error {
-	out, err := os.Create(dstFile)
-	if err != nil {
-		return err
-	}
-
-	defer func(out *os.File) {
-		err := out.Close()
-		if err != nil {
-			slog.Error("failed to close file", slog.Any("err", err))
-		}
-	}(out)
-
-	in, err := os.Open(srcFile)
-	if err != nil {
-		return err
-	}
-
-	defer func(in *os.File) {
-		err := in.Close()
-		if err != nil {
-			slog.Error("error closing destination file", slog.Any("err", err))
-		}
-	}(in)
-
-	_, err = io.Copy(out, in)
-	if err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func Exists(filePath string) bool {
-	if _, err := os.Stat(filePath); os.IsNotExist(err) {
-		return false
-	}
-
-	return true
-}
-
-func CreateIfNotExists(dir string, perm os.FileMode) error {
-	if Exists(dir) {
-		return nil
-	}
-
-	if err := os.MkdirAll(dir, perm); err != nil {
-		return fmt.Errorf("failed to create directory: '%s', error: '%s'", dir, err.Error())
-	}
-
-	return nil
-}
-
-func CopySymLink(source, dest string) error {
-	link, err := os.Readlink(source)
-	if err != nil {
-		return err
-	}
-	return os.Symlink(link, dest)
-}

generator/cmd/build/formats.go

@@ -1,53 +0,0 @@
-package build
-
-import (
-	"regexp"
-	"strings"
-	"unicode"
-	"unicode/utf8"
-)
-
-// snakeLetters will match to the first letter and an underscore followed by a letter
-var snakeLetters = regexp.MustCompile("(^[a-z])|_[a-z0-9]")
-
-func ToPascalCase(in string) string {
-	inputSplit := strings.Split(in, ".")
-
-	var ucName string
-
-	for _, v := range inputSplit {
-		if len(v) < 1 {
-			continue
-		}
-
-		firstChar := v[0:1]
-		ucFirstChar := strings.ToUpper(firstChar)
-
-		if len(v) < 2 {
-			ucName += ucFirstChar
-			continue
-		}
-
-		ucName += ucFirstChar + v[1:]
-	}
-
-	return snakeLetters.ReplaceAllStringFunc(ucName, func(s string) string {
-		return strings.ToUpper(strings.ReplaceAll(s, "_", ""))
-	})
-}
-
-func ToCamelCase(in string) string {
-	pascal := ToPascalCase(in)
-
-	// Grab first rune and lower case it
-	firstLetter, size := utf8.DecodeRuneInString(pascal)
-	if firstLetter == utf8.RuneError && size <= 1 {
-		return pascal
-	}
-
-	return string(unicode.ToLower(firstLetter)) + pascal[size:]
-}
-
-func ValidateSnakeCase(in string) bool {
-	return snakeLetters.MatchString(string(in))
-}

generator/cmd/build/functions.go

@@ -1,120 +0,0 @@
-package build
-
-import (
-	"fmt"
-	"log/slog"
-	"os"
-	"os/exec"
-	"strings"
-	"text/template"
-)
-
-func FileExists(pathValue string) bool {
-	_, err := os.Stat(pathValue)
-	if os.IsNotExist(err) {
-		return false
-	}
-	if err != nil {
-		panic(err)
-	}
-	return true
-}
-
-func ucfirst(s string) string {
-	if s == "" {
-		return ""
-	}
-	return strings.ToUpper(s[:1]) + s[1:]
-}
-
-func writeTemplateToFile(tplName, tplFile, outFile string, data *templateData) error {
-	fn := template.FuncMap{
-		"ucfirst": ucfirst,
-	}
-
-	tmpl, err := template.New(tplName).Funcs(fn).ParseFiles(tplFile)
-	if err != nil {
-		return err
-	}
-
-	var f *os.File
-	f, err = os.Create(outFile)
-	if err != nil {
-		return err
-	}
-
-	err = tmpl.Execute(f, *data)
-	if err != nil {
-		return err
-	}
-
-	err = f.Close()
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-/* saved for later
-func deleteFiles(fNames ...string) error {
-	for _, fName := range fNames {
-		if _, err := os.Stat(fName); !os.IsNotExist(err) {
-			err = os.Remove(fName)
-			if err != nil {
-				return err
-			}
-		}
-	}
-	return nil
-}
-
-func copyFile(src, dst string) (int64, error) {
-	sourceFileStat, err := os.Stat(src)
-	if err != nil {
-		return 0, err
-	}
-
-	if !sourceFileStat.Mode().IsRegular() {
-		return 0, fmt.Errorf("%s is not a regular file", src)
-	}
-
-	source, err := os.Open(src)
-	if err != nil {
-		return 0, err
-	}
-	defer func(source *os.File) {
-		err := source.Close()
-		if err != nil {
-			slog.Error("copyFile", "err", err)
-		}
-	}(source)
-
-	destination, err := os.Create(dst)
-	if err != nil {
-		return 0, err
-	}
-	defer func(destination *os.File) {
-		err := destination.Close()
-		if err != nil {
-			slog.Error("copyFile", "err", err)
-		}
-	}(destination)
-	nBytes, err := io.Copy(destination, source)
-	return nBytes, err
-}
-*/
-
-func checkCommands(commands []string) error {
-	for _, commandName := range commands {
-		if !commandExists(commandName) {
-			return fmt.Errorf("missing command %s", commandName)
-		}
-		slog.Info("        found", "command", commandName)
-	}
-	return nil
-}
-
-func commandExists(cmd string) bool {
-	_, err := exec.LookPath(cmd)
-	return err == nil
-}

generator/cmd/build/oas-handler.go

@@ -1,446 +0,0 @@
-package build
-
-import (
-	"bufio"
-	"bytes"
-	"errors"
-	"fmt"
-	"log"
-	"log/slog"
-	"os"
-	"os/exec"
-	"path"
-	"regexp"
-	"strings"
-
-	"gopkg.in/yaml.v3"
-
-	"github.com/ldez/go-git-cmd-wrapper/v2/clone"
-	"github.com/ldez/go-git-cmd-wrapper/v2/git"
-)
-
-const (
-	OasRepoName = "stackit-api-specifications"
-	OasRepo     = "https://github.com/stackitcloud/stackit-api-specifications.git"
-
-	ResTypeResource   = "resources"
-	ResTypeDataSource = "datasources"
-)
-
-type Data struct {
-	ServiceName string    `yaml:",omitempty" json:",omitempty"`
-	Versions    []Version `yaml:"versions" json:"versions"`
-}
-
-type Version struct {
-	Name string `yaml:"name" json:"name"`
-	Path string `yaml:"path" json:"path"`
-}
-
-var oasTempDir string
-
-func (b *Builder) oasHandler(specDir string) error {
-	if b.Verbose {
-		slog.Info("creating schema files", "dir", specDir)
-	}
-	if _, err := os.Stat(specDir); os.IsNotExist(err) {
-		return fmt.Errorf("spec files directory does not exist")
-	}
-
-	err := b.createRepoDir(b.SkipClone)
-	if err != nil {
-		return fmt.Errorf("%s", err.Error())
-	}
-
-	err2 := b.handleServices(specDir)
-	if err2 != nil {
-		return err2
-	}
-
-	if !b.SkipCleanup {
-		if b.Verbose {
-			slog.Info("Finally removing temporary files and directories")
-		}
-		err := os.RemoveAll(path.Join(b.rootDir, "generated"))
-		if err != nil {
-			slog.Error("RemoveAll", "dir", path.Join(b.rootDir, "generated"), "err", err)
-			return err
-		}
-
-		err = os.RemoveAll(oasTempDir)
-		if err != nil {
-			slog.Error("RemoveAll", "dir", oasTempDir, "err", err)
-			return err
-		}
-	}
-
-	return nil
-}
-
-func (b *Builder) handleServices(specDir string) error {
-	services, err := os.ReadDir(specDir)
-	if err != nil {
-		return err
-	}
-
-	for _, svc := range services {
-		if !svc.IsDir() {
-			continue
-		}
-
-		if b.Verbose {
-			slog.Info("  ... found", "service", svc.Name())
-		}
-		var svcVersions Data
-		svcVersions.ServiceName = svc.Name()
-
-		versionsErr := b.getServiceVersions(path.Join(specDir, svc.Name(), "generator_settings.yml"), &svcVersions)
-		if versionsErr != nil {
-			return versionsErr
-		}
-
-		oasSpecErr := b.generateServiceFiles(&svcVersions)
-		if oasSpecErr != nil {
-			return oasSpecErr
-		}
-	}
-	return nil
-}
-
-func (b *Builder) getServiceVersions(confFile string, data *Data) error {
-	if _, cfgFileErr := os.Stat(confFile); os.IsNotExist(cfgFileErr) {
-		return fmt.Errorf("config file does not exist")
-	}
-
-	fileContent, fileErr := os.ReadFile(confFile)
-	if fileErr != nil {
-		return fileErr
-	}
-	convErr := yaml.Unmarshal(fileContent, &data)
-	if convErr != nil {
-		return convErr
-	}
-
-	return nil
-}
-
-func (b *Builder) createRepoDir(skipClone bool) error {
-	tmpDirName, err := os.MkdirTemp("", "oasbuild")
-	if err != nil {
-		return err
-	}
-	oasTempDir = path.Join(tmpDirName, OasRepoName)
-	slog.Info("Creating oas repo dir", "dir", oasTempDir)
-	if !skipClone {
-		if FileExists(oasTempDir) {
-			slog.Warn("target dir exists - skipping", "targetDir", oasTempDir)
-			return nil
-		}
-		out, cloneErr := git.Clone(
-			clone.Repository(OasRepo),
-			clone.Directory(oasTempDir),
-		)
-		if cloneErr != nil {
-			slog.Error("git clone error", "output", out)
-			return cloneErr
-		}
-		if b.Verbose {
-			slog.Info("git clone result", "output", out)
-		}
-	}
-	return nil
-}
-
-func (b *Builder) generateServiceFiles(data *Data) error {
-	err := os.MkdirAll(path.Join(b.rootDir, "generated", "specs"), 0o750)
-	if err != nil {
-		return err
-	}
-
-	for _, v := range data.Versions {
-		specFiles, specsErr := os.ReadDir(path.Join(b.rootDir, "service_specs", data.ServiceName, v.Name))
-		if specsErr != nil {
-			return specsErr
-		}
-		for _, specFile := range specFiles {
-			if specFile.IsDir() {
-				continue
-			}
-			r := regexp.MustCompile(`^(.*)_config.yml$`)
-			matches := r.FindAllStringSubmatch(specFile.Name(), -1)
-			if matches == nil {
-				slog.Warn("    skipping file (no regex match)", "file", specFile.Name())
-				continue
-			}
-
-			srcSpecFile := path.Join(b.rootDir, "service_specs", data.ServiceName, v.Name, specFile.Name())
-
-			if matches[0][0] != specFile.Name() {
-				return fmt.Errorf("matched filename differs from original filename - this should not happen")
-			}
-			resource := matches[0][1]
-			if b.Verbose {
-				slog.Info(
-					"    found service spec",
-					"service",
-					data.ServiceName,
-					"resource",
-					resource,
-					"file",
-					specFile.Name(),
-				)
-			}
-
-			oasFile := path.Join(
-				oasTempDir,
-				"services",
-				data.ServiceName,
-				v.Path,
-				fmt.Sprintf("%s.json", data.ServiceName),
-			)
-			if _, oasErr := os.Stat(oasFile); os.IsNotExist(oasErr) {
-				slog.Warn(
-					"        could not find matching oas",
-					"svc",
-					data.ServiceName,
-					"version",
-					v.Name,
-				)
-				continue
-			}
-
-			// determine correct target service name
-			scName := fmt.Sprintf("%s%s", data.ServiceName, v.Name)
-			scName = strings.ReplaceAll(scName, "-", "")
-
-			specJSONFile := path.Join(
-				b.rootDir,
-				"generated",
-				"specs",
-				fmt.Sprintf("%s_%s_spec.json", scName, resource),
-			)
-
-			cmdErr := b.runTerraformPluginGenOpenAPI(srcSpecFile, specJSONFile, oasFile)
-			if cmdErr != nil {
-				return cmdErr
-			}
-
-			cmdResGenErr := b.runTerraformPluginGenFramework(ResTypeResource, scName, resource, specJSONFile)
-			if cmdResGenErr != nil {
-				return cmdResGenErr
-			}
-
-			cmdDsGenErr := b.runTerraformPluginGenFramework(ResTypeDataSource, scName, resource, specJSONFile)
-			if cmdDsGenErr != nil {
-				return cmdDsGenErr
-			}
-		}
-	}
-
-	return nil
-}
-
-func (b *Builder) runTerraformPluginGenFramework(resType, svcName, resource, specJSONFile string) error {
-	var stdOut, stdErr bytes.Buffer
-	tgtFolder := path.Join(
-		b.rootDir,
-		"stackit",
-		"internal",
-		"services",
-		svcName,
-		resource,
-		fmt.Sprintf("%s_gen", resType),
-	)
-
-	//nolint:gosec // this file is not sensitive, so we can use 0755
-	err := os.MkdirAll(tgtFolder, 0o755)
-	if err != nil {
-		return err
-	}
-
-	var subCmd string
-	switch resType {
-	case ResTypeResource:
-		subCmd = "resources"
-	case ResTypeDataSource:
-		subCmd = "data-sources"
-	default:
-		return fmt.Errorf("unknown resource type given: %s", resType)
-	}
-
-	// nolint:gosec // #nosec this command is not using any untrusted input, so we can ignore gosec warning
-	cmd := exec.Command(
-		"tfplugingen-framework",
-		"generate",
-		subCmd,
-		"--input",
-		specJSONFile,
-		"--output",
-		tgtFolder,
-		"--package",
-		svcName,
-	)
-
-	cmd.Stdout = &stdOut
-	cmd.Stderr = &stdErr
-	if err = cmd.Start(); err != nil {
-		slog.Error(fmt.Sprintf("tfplugingen-framework generate %s", resType), "error", err)
-		return err
-	}
-
-	if err = cmd.Wait(); err != nil {
-		var exitErr *exec.ExitError
-		if errors.As(err, &exitErr) {
-			slog.Error(
-				fmt.Sprintf("tfplugingen-framework generate %s", resType),
-				"code",
-				exitErr.ExitCode(),
-				"error",
-				err,
-				"stdout",
-				stdOut.String(),
-				"stderr",
-				stdErr.String(),
-			)
-			return fmt.Errorf("%s", stdErr.String())
-		}
-		if err != nil {
-			slog.Error(
-				fmt.Sprintf("tfplugingen-framework generate %s", resType),
-				"err",
-				err,
-				"stdout",
-				stdOut.String(),
-				"stderr",
-				stdErr.String(),
-			)
-			return err
-		}
-	}
-
-	if resType == ResTypeDataSource {
-		tfAnoErr := b.handleTfTagForDatasourceFile(
-			path.Join(tgtFolder, fmt.Sprintf("%s_data_source_gen.go", resource)),
-			svcName,
-			resource,
-		)
-		if tfAnoErr != nil {
-			return tfAnoErr
-		}
-	}
-
-	return nil
-}
-
-func (b *Builder) runTerraformPluginGenOpenAPI(srcSpecFile, specJSONFile, oasFile string) error {
-	var stdOut, stdErr bytes.Buffer
-
-	// nolint:gosec // #nosec this command is not using any untrusted input, so we can ignore gosec warning
-	cmd := exec.Command(
-		"tfplugingen-openapi",
-		"generate",
-		"--config",
-		srcSpecFile,
-		"--output",
-		specJSONFile,
-		oasFile,
-	)
-	cmd.Stdout = &stdOut
-	cmd.Stderr = &stdErr
-
-	if err := cmd.Start(); err != nil {
-		slog.Error(
-			"tfplugingen-openapi generate",
-			"error",
-			err,
-			"stdOut",
-			stdOut.String(),
-			"stdErr",
-			stdErr.String(),
-		)
-		return err
-	}
-
-	if err := cmd.Wait(); err != nil {
-		var exitErr *exec.ExitError
-		if errors.As(err, &exitErr) {
-			slog.Error(
-				"tfplugingen-openapi generate",
-				"code",
-				exitErr.ExitCode(),
-				"error",
-				err,
-				"stdout",
-				stdOut.String(),
-				"stderr",
-				stdErr.String(),
-			)
-			return fmt.Errorf("%s", stdErr.String())
-		}
-		if err != nil {
-			slog.Error(
-				"tfplugingen-openapi generate",
-				"err",
-				err,
-				"stdout",
-				stdOut.String(),
-				"stderr",
-				stdErr.String(),
-			)
-			return err
-		}
-	}
-	if stdOut.Len() > 0 {
-		slog.Warn("    command output", "stdout", stdOut.String(), "stderr", stdErr.String())
-	}
-
-	return nil
-}
-
-// handleTfTagForDatasourceFile replaces existing "id" with "stf_original_api_id"
-func (b *Builder) handleTfTagForDatasourceFile(filePath, service, resource string) error {
-	if b.Verbose {
-		slog.Info("   handle terraform tag for datasource", "service", service, "resource", resource)
-	}
-	if !FileExists(filePath) {
-		slog.Warn("        could not find file, skipping", "path", filePath)
-		return nil
-	}
-	f, err := os.Open(filePath)
-	if err != nil {
-		return err
-	}
-
-	tmp, err := os.CreateTemp(b.rootDir, "replace-*")
-	if err != nil {
-		return err
-	}
-
-	sc := bufio.NewScanner(f)
-	for sc.Scan() {
-		resLine, err := handleLine(sc.Text())
-		if err != nil {
-			return err
-		}
-		if _, err := tmp.WriteString(resLine + "\n"); err != nil {
-			return err
-		}
-	}
-	if scErr := sc.Err(); scErr != nil {
-		return scErr
-	}
-
-	if err := tmp.Close(); err != nil {
-		return err
-	}
-
-	if err := f.Close(); err != nil {
-		return err
-	}
-
-	//nolint:gosec // path traversal is not a concern here
-	if err := os.Rename(tmp.Name(), filePath); err != nil {
-		log.Fatal(err)
-	}
-	return nil
-}

generator/cmd/build/templates/data_source_scaffold.gotmpl

@@ -1,148 +0,0 @@
-package {{.PackageName}}
-
-import (
-	"context"
-	"fmt"
-	"net/http"
-
-	"github.com/hashicorp/terraform-plugin-framework/datasource"
-	"github.com/hashicorp/terraform-plugin-framework/datasource/schema"
-	"github.com/hashicorp/terraform-plugin-framework/types"
-	"github.com/hashicorp/terraform-plugin-log/tflog"
-	"github.com/stackitcloud/stackit-sdk-go/core/config"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
-
-    {{.PackageName}}Pkg "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/pkg_gen/{{.PackageName}}"
-
-    {{.PackageName}}Gen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/{{.PackageName}}/{{.NameSnake}}/datasources_gen"
-)
-
-var _ datasource.DataSource = (*{{.NameCamel}}DataSource)(nil)
-
-const errorPrefix = "[{{.PackageNamePascal}} - {{.NamePascal}}]"
-
-func New{{.NamePascal}}DataSource() datasource.DataSource {
-	return &{{.NameCamel}}DataSource{}
-}
-
-type dsModel struct {
-	{{.PackageName}}Gen.{{.NamePascal}}Model
-	TfId types.String `tfsdk:"id"`
-}
-
-type {{.NameCamel}}DataSource struct{
-	client       *{{.PackageName}}Pkg.APIClient
-	providerData core.ProviderData
-}
-
-func (d *{{.NameCamel}}DataSource) Metadata(_ context.Context, req datasource.MetadataRequest, resp *datasource.MetadataResponse) {
-	resp.TypeName = req.ProviderTypeName + "_{{.PackageName}}_{{.NameSnake}}"
-}
-
-func (d *{{.NameCamel}}DataSource) Schema(ctx context.Context, _ datasource.SchemaRequest, resp *datasource.SchemaResponse) {
-	resp.Schema = {{.PackageName}}Gen.{{.NamePascal}}DataSourceSchema(ctx)
-    resp.Schema.Attributes["id"] = schema.StringAttribute{
-        Computed:            true,
-        Description:         "The terraform internal identifier.",
-        MarkdownDescription: "The terraform internal identifier.",
-    }
-}
-
-// Configure adds the provider configured client to the data source.
-func (d *{{.NameCamel}}DataSource) Configure(
-	ctx context.Context,
-	req datasource.ConfigureRequest,
-	resp *datasource.ConfigureResponse,
-) {
-	var ok bool
-	d.providerData, ok = conversion.ParseProviderData(ctx, req.ProviderData, &resp.Diagnostics)
-	if !ok {
-		return
-	}
-
-	apiClientConfigOptions := []config.ConfigurationOption{
-		config.WithCustomAuth(d.providerData.RoundTripper),
-		utils.UserAgentConfigOption(d.providerData.Version),
-	}
-	if d.providerData.{{.PackageNamePascal}}CustomEndpoint != "" {
-		apiClientConfigOptions = append(
-			apiClientConfigOptions,
-			config.WithEndpoint(d.providerData.{{.PackageNamePascal}}CustomEndpoint),
-		)
-	} else {
-		apiClientConfigOptions = append(
-			apiClientConfigOptions,
-			config.WithRegion(d.providerData.GetRegion()),
-		)
-	}
-	apiClient, err := {{.PackageName}}Pkg.NewAPIClient(apiClientConfigOptions...)
-	if err != nil {
-		resp.Diagnostics.AddError(
-			"Error configuring API client",
-			fmt.Sprintf(
-				"Configuring client: %v. This is an error related to the provider configuration, not to the resource configuration",
-				err,
-			),
-		)
-		return
-	}
-	d.client = apiClient
-	tflog.Info(ctx, fmt.Sprintf("%s client configured", errorPrefix))
-}
-
-func (d *{{.NameCamel}}DataSource) Read(ctx context.Context, req datasource.ReadRequest, resp *datasource.ReadResponse) {
-	var data dsModel
-
-	// Read Terraform configuration data into the model
-	resp.Diagnostics.Append(req.Config.Get(ctx, &data)...)
-
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	ctx = core.InitProviderContext(ctx)
-
-	projectId := data.ProjectId.ValueString()
-	region := d.providerData.GetRegionWithOverride(data.Region)
-	{{.NameCamel}}Id := data.{{.NamePascal}}Id.ValueString()
-
-	ctx = tflog.SetField(ctx, "project_id", projectId)
-	ctx = tflog.SetField(ctx, "region", region)
-
-	// TODO: implement needed fields
-	ctx = tflog.SetField(ctx, "{{.NameCamel}}_id", {{.NameCamel}}Id)
-
-    // TODO: refactor to correct implementation
-	{{.NameCamel}}Resp, err := d.client.Get{{.NamePascal}}Request(ctx, projectId, region, {{.NameCamel}}Id).Execute()
-	if err != nil {
-		utils.LogError(
-			ctx,
-			&resp.Diagnostics,
-			err,
-			"Reading {{.NameCamel}}",
-			fmt.Sprintf("{{.NameCamel}} with ID %q does not exist in project %q.", {{.NameCamel}}Id, projectId),
-			map[int]string{
-				http.StatusForbidden: fmt.Sprintf("Project with ID %q not found or forbidden access", projectId),
-			},
-		)
-		resp.State.RemoveResource(ctx)
-		return
-	}
-
-	ctx = core.LogResponse(ctx)
-
-
-	data.TfId = utils.BuildInternalTerraformId(projectId, region, ..)
-
-	// TODO: fill remaining fields
-{{- range .Fields }}
-    // data.{{.}} = types.Sometype(apiResponse.Get{{.}}())
-{{- end -}}
-
-	// Save data into Terraform state
-	resp.Diagnostics.Append(resp.State.Set(ctx, &data)...)
-
-	tflog.Info(ctx, fmt.Sprintf("%s read successful", errorPrefix))
-}

generator/cmd/build/templates/functions_scaffold.gotmpl

@@ -1,98 +0,0 @@
-package {{.PackageName}}
-
-import (
-	"context"
-	"fmt"
-	"math"
-
-	"github.com/hashicorp/terraform-plugin-framework/attr"
-	"github.com/hashicorp/terraform-plugin-framework/diag"
-	"github.com/hashicorp/terraform-plugin-framework/resource"
-	"github.com/hashicorp/terraform-plugin-framework/types"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
-
-	{{.PackageName}} "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/pkg_gen/{{.PackageName}}"
-	{{.PackageName}}ResGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/{{.PackageName}}/instance/resources_gen"
-)
-
-func mapResponseToModel(
-	ctx context.Context,
-	resp *{{.PackageName}}.Get{{.NamePascal}}Response,
-	m *{{.PackageName}}ResGen.{{.NamePascal}}Model,
-	tfDiags diag.Diagnostics,
-) error {
-    // TODO: complete and refactor
-	m.Id = types.StringValue(resp.GetId())
-
-    /*
-	sampleList, diags := types.ListValueFrom(ctx, types.StringType, resp.GetList())
-	tfDiags.Append(diags...)
-	if diags.HasError() {
-		return fmt.Errorf(
-			"error converting list response value",
-		)
-	}
-	sample, diags := {{.PackageName}}ResGen.NewSampleValue(
-		{{.PackageName}}ResGen.SampleValue{}.AttributeTypes(ctx),
-		map[string]attr.Value{
-			"field":     types.StringValue(string(resp.GetField())),
-		},
-	)
-	tfDiags.Append(diags...)
-	if diags.HasError() {
-		return fmt.Errorf(
-			"error converting sample response value",
-			"sample",
-			types.StringValue(string(resp.GetField())),
-		)
-	}
-	m.Sample = sample
-	*/
-	return nil
-}
-
-func handleEncryption(
-	m *{{.PackageName}}ResGen.{{.NamePascal}}Model,
-	resp *{{.PackageName}}.Get{{.NamePascal}}Response,
-) {{.PackageName}}ResGen.EncryptionValue {
-	if !resp.HasEncryption() ||
-		resp.Encryption == nil ||
-		resp.Encryption.KekKeyId == nil ||
-		resp.Encryption.KekKeyRingId == nil ||
-		resp.Encryption.KekKeyVersion == nil ||
-		resp.Encryption.ServiceAccount == nil {
-
-		if m.Encryption.IsNull() || m.Encryption.IsUnknown() {
-			return {{.PackageName}}ResGen.NewEncryptionValueNull()
-		}
-		return m.Encryption
-	}
-
-	enc := {{.PackageName}}ResGen.NewEncryptionValueNull()
-	if kVal, ok := resp.Encryption.GetKekKeyIdOk(); ok {
-		enc.KekKeyId = types.StringValue(kVal)
-	}
-	if kkVal, ok := resp.Encryption.GetKekKeyRingIdOk(); ok {
-		enc.KekKeyRingId = types.StringValue(kkVal)
-	}
-	if kkvVal, ok := resp.Encryption.GetKekKeyVersionOk(); ok {
-		enc.KekKeyVersion = types.StringValue(kkvVal)
-	}
-	if sa, ok := resp.Encryption.GetServiceAccountOk(); ok {
-		enc.ServiceAccount = types.StringValue(sa)
-	}
-	return enc
-}
-
-func toCreatePayload(
-	ctx context.Context,
-	model *{{.PackageName}}ResGen.{{.NamePascal}}Model,
-) (*{{.PackageName}}.Create{{.NamePascal}}RequestPayload, error) {
-	if model == nil {
-		return nil, fmt.Errorf("nil model")
-	}
-
-	return &{{.PackageName}}.Create{{.NamePascal}}RequestPayload{
-	    // TODO: fill fields
-	}, nil
-}

generator/cmd/build/templates/provider_scaffold.gotmpl

@@ -1,39 +0,0 @@
-package {{.PackageName}}
-
-import (
-	"context"
-
-	"github.com/hashicorp/terraform-plugin-framework/datasource"
-	"github.com/hashicorp/terraform-plugin-framework/provider"
-	"github.com/hashicorp/terraform-plugin-framework/resource"
-)
-
-var _ provider.Provider = (*{{.NameCamel}}Provider)(nil)
-
-func New() func() provider.Provider {
-	return func() provider.Provider {
-		return &{{.NameCamel}}Provider{}
-	}
-}
-
-type {{.NameCamel}}Provider struct{}
-
-func (p *{{.NameCamel}}Provider) Schema(ctx context.Context, req provider.SchemaRequest, resp *provider.SchemaResponse) {
-
-}
-
-func (p *{{.NameCamel}}Provider) Configure(ctx context.Context, req provider.ConfigureRequest, resp *provider.ConfigureResponse) {
-
-}
-
-func (p *{{.NameCamel}}Provider) Metadata(ctx context.Context, req provider.MetadataRequest, resp *provider.MetadataResponse) {
-	resp.TypeName = "{{.NameSnake}}"
-}
-
-func (p *{{.NameCamel}}Provider) DataSources(ctx context.Context) []func() datasource.DataSource {
-	return []func() datasource.DataSource{}
-}
-
-func (p *{{.NameCamel}}Provider) Resources(ctx context.Context) []func() resource.Resource {
-	return []func() resource.Resource{}
-}

generator/cmd/build/templates/resource_scaffold.gotmpl

@@ -1,429 +0,0 @@
-package {{.PackageName}}
-
-import (
-	"context"
-	_ "embed"
-	"fmt"
-	"strings"
-
-	"github.com/hashicorp/terraform-plugin-framework/path"
-	"github.com/hashicorp/terraform-plugin-framework/resource"
-	"github.com/hashicorp/terraform-plugin-framework/resource/identityschema"
-	"github.com/hashicorp/terraform-plugin-framework/types"
-	"github.com/hashicorp/terraform-plugin-log/tflog"
-	"github.com/stackitcloud/stackit-sdk-go/core/config"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
-
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/pkg_gen/{{.PackageName}}"
-
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
-
-	{{.PackageName}}ResGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/{{.PackageName}}/{{.NameSnake}}/resources_gen"
-)
-
-var (
-	_ resource.Resource                = &{{.NameCamel}}Resource{}
-	_ resource.ResourceWithConfigure   = &{{.NameCamel}}Resource{}
-	_ resource.ResourceWithImportState = &{{.NameCamel}}Resource{}
-	_ resource.ResourceWithModifyPlan  = &{{.NameCamel}}Resource{}
-	_ resource.ResourceWithIdentity    = &{{.NameCamel}}Resource{}
-)
-
-func New{{.NamePascal}}Resource() resource.Resource {
-	return &{{.NameCamel}}Resource{}
-}
-
-type {{.NameCamel}}Resource struct{
-	client       *{{.PackageName}}.APIClient
-	providerData core.ProviderData
-}
-
-// resourceModel represents the Terraform resource state
-type resourceModel = {{.PackageName}}.{{.NamePascal}}Model
-
-type {{.NamePascal}}ResourceIdentityModel struct {
-	ProjectID  types.String `tfsdk:"project_id"`
-	Region     types.String `tfsdk:"region"`
-	// TODO: implement further needed parts
-	{{.NamePascal}}ID types.String `tfsdk:"{{.NameSnake}}_id"`
-}
-
-// Metadata defines terraform resource name
-func (r *{{.NameCamel}}Resource) Metadata(ctx context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse) {
-	resp.TypeName = req.ProviderTypeName + "_{{.PackageName}}_{{.NameSnake}}"
-}
-
-//go:embed planModifiers.yaml
-var modifiersFileByte []byte
-
-// Schema loads the schema from generated files and adds plan modifiers
-func (r *{{.NameCamel}}Resource) Schema(ctx context.Context, req resource.SchemaRequest, resp *resource.SchemaResponse) {
-	schema = {{.PackageName}}ResGen.{{.NamePascal}}ResourceSchema(ctx)
-
-    fields, err := {{.PackageName}}Utils.ReadModifiersConfig(modifiersFileByte)
-    if err != nil {
-        resp.Diagnostics.AddError("error during read modifiers config file", err.Error())
-        return
-    }
-
-    err = {{.PackageName}}Utils.AddPlanModifiersToResourceSchema(fields, &schema)
-    if err != nil {
-        resp.Diagnostics.AddError("error adding plan modifiers", err.Error())
-        return
-    }
-    resp.Schema = schema
-}
-
-// IdentitySchema defines the identity schema
-func (r *instanceResource) IdentitySchema(_ context.Context, _ resource.IdentitySchemaRequest, resp *resource.IdentitySchemaResponse) {
-	resp.IdentitySchema = identityschema.Schema{
-		Attributes: map[string]identityschema.Attribute{
-			"project_id": identityschema.StringAttribute{
-				RequiredForImport: true, // must be set during import by the practitioner
-			},
-			"region": identityschema.StringAttribute{
-				RequiredForImport: true, // can be defaulted by the provider configuration
-			},
-			"instance_id": identityschema.StringAttribute{
-				RequiredForImport: true, // can be defaulted by the provider configuration
-			},
-			// TODO: implement remaining schema parts
-		},
-	}
-}
-
-// Configure adds the provider configured client to the resource.
-func (r *{{.NameCamel}}Resource) Configure(
-	ctx context.Context,
-	req resource.ConfigureRequest,
-	resp *resource.ConfigureResponse,
-) {
-	var ok bool
-	r.providerData, ok = conversion.ParseProviderData(ctx, req.ProviderData, &resp.Diagnostics)
-	if !ok {
-		return
-	}
-
-	apiClientConfigOptions := []config.ConfigurationOption{
-		config.WithCustomAuth(r.providerData.RoundTripper),
-		utils.UserAgentConfigOption(r.providerData.Version),
-	}
-	if r.providerData.{{.PackageNamePascal}}CustomEndpoint != "" {
-		apiClientConfigOptions = append(apiClientConfigOptions, config.WithEndpoint(r.providerData.{{.PackageName}}CustomEndpoint))
-	} else {
-		apiClientConfigOptions = append(apiClientConfigOptions, config.WithRegion(r.providerData.GetRegion()))
-	}
-	apiClient, err := {{.PackageName}}.NewAPIClient(apiClientConfigOptions...)
-	if err != nil {
-		resp.Diagnostics.AddError(
-		    "Error configuring API client",
-		    fmt.Sprintf(
-		        "Configuring client: %v. This is an error related to the provider configuration, not to the resource configuration",
-		        err,
-            ),
-        )
-		return
-	}
-	r.client = apiClient
-	tflog.Info(ctx, "{{.PackageName}}.{{.NamePascal}} client configured")
-}
-
-// ModifyPlan implements resource.ResourceWithModifyPlan.
-// Use the modifier to set the effective region in the current plan.
-func (r *{{.NameCamel}}Resource) ModifyPlan(
-	ctx context.Context,
-	req resource.ModifyPlanRequest,
-	resp *resource.ModifyPlanResponse,
-) { // nolint:gocritic // function signature required by Terraform
-
-	// skip initial empty configuration to avoid follow-up errors
-	if req.Config.Raw.IsNull() {
-		return
-	}
-	var configModel {{.PackageName}}ResGen.{{.NamePascal}}Model
-	resp.Diagnostics.Append(req.Config.Get(ctx, &configModel)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	if req.Plan.Raw.IsNull() {
-		return
-	}
-	var planModel {{.PackageName}}ResGen.{{.NamePascal}}Model
-	resp.Diagnostics.Append(req.Plan.Get(ctx, &planModel)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	utils.AdaptRegion(ctx, configModel.Region, &planModel.Region, r.providerData.GetRegion(), resp)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	resp.Diagnostics.Append(resp.Plan.Set(ctx, planModel)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-}
-
-// Create creates a new resource
-func (r *{{.NameCamel}}Resource) Create(ctx context.Context, req resource.CreateRequest, resp *resource.CreateResponse) {
-	var data {{.PackageName}}ResGen.{{.NamePascal}}Model
-
-	// Read Terraform plan data into the model
-	resp.Diagnostics.Append(req.Plan.Get(ctx, &data)...)
-
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	ctx = core.InitProviderContext(ctx)
-
-	projectId := data.ProjectId.ValueString()
-	region := data.Region.ValueString()
-	ctx = tflog.SetField(ctx, "project_id", projectId)
-	ctx = tflog.SetField(ctx, "region", region)
-	// TODO: add remaining fields
-
-	// TODO: Create API call logic
-	/*
-		// Generate API request body from model
-    	payload, err := toCreatePayload(ctx, &model)
-    	if err != nil {
-    		core.LogAndAddError(
-    			ctx,
-    			&resp.Diagnostics,
-    			"Error creating {{.NamePascal}}",
-    			fmt.Sprintf("Creating API payload: %v", err),
-    		)
-    		return
-    	}
-    	// Create new {{.NamePascal}}
-    	createResp, err := r.client.Create{{.NamePascal}}Request(
-    		ctx,
-    		projectId,
-    		region,
-    	).Create{{.NamePascal}}RequestPayload(*payload).Execute()
-    	if err != nil {
-    		core.LogAndAddError(ctx, &resp.Diagnostics, "Error creating {{.NamePascal}}", fmt.Sprintf("Calling API: %v", err))
-    		return
-    	}
-
-    	ctx = core.LogResponse(ctx)
-
-    	{{.NamePascal}}Id := *createResp.Id
-    */
-
-	// Example data value setting
-	data.{{.NameCamel | ucfirst}}Id = types.StringValue("id-from-response")
-
-	// TODO: Set data returned by API in identity
-	identity := {{.NamePascal}}ResourceIdentityModel{
-		ProjectID:  types.StringValue(projectId),
-		Region:     types.StringValue(region),
-		// TODO: add missing values
-		{{.NamePascal}}ID: types.StringValue({{.NamePascal}}Id),
-	}
-	resp.Diagnostics.Append(resp.Identity.Set(ctx, identity)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	// TODO: implement wait handler if needed
-	/*
-
-		waitResp, err := wait.Create{{.NamePascal}}WaitHandler(
-    		ctx,
-    		r.client,
-    		projectId,
-    		{{.NamePascal}}Id,
-    		region,
-    	).SetSleepBeforeWait(
-    		30 * time.Second,
-    	).SetTimeout(
-    		90 * time.Minute,
-    	).WaitWithContext(ctx)
-    	if err != nil {
-    		core.LogAndAddError(
-    			ctx,
-    			&resp.Diagnostics,
-    			"Error creating {{.NamePascal}}",
-    			fmt.Sprintf("{{.NamePascal}} creation waiting: %v", err),
-    		)
-    		return
-    	}
-
-    	if waitResp.Id == nil {
-    		core.LogAndAddError(
-    			ctx,
-    			&resp.Diagnostics,
-    			"Error creating {{.NamePascal}}",
-    			"{{.NamePascal}} creation waiting: returned id is nil",
-    		)
-    		return
-    	}
-
-    	// Map response body to schema
-    	err = mapResponseToModel(ctx, waitResp, &model, resp.Diagnostics)
-    	if err != nil {
-    		core.LogAndAddError(
-    			ctx,
-    			&resp.Diagnostics,
-    			"Error creating {{.NamePascal}}",
-    			fmt.Sprintf("Processing API payload: %v", err),
-    		)
-    		return
-    	}
-
-	*/
-
-	// Save data into Terraform state
-	resp.Diagnostics.Append(resp.State.Set(ctx, &data)...)
-
-	tflog.Info(ctx, "{{.PackageName}}.{{.NamePascal}} created")
-}
-
-func (r *{{.NameCamel}}Resource) Read(ctx context.Context, req resource.ReadRequest, resp *resource.ReadResponse) {
-	var data {{.PackageName}}ResGen.{{.NamePascal}}Model
-
-	// Read Terraform prior state data into the model
-	resp.Diagnostics.Append(req.State.Get(ctx, &data)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	// Read identity data
-	var identityData {{.NamePascal}}ResourceIdentityModel
-	resp.Diagnostics.Append(req.Identity.Get(ctx, &identityData)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-
-	ctx = core.InitProviderContext(ctx)
-
-	projectId := identityData.ProjectID.ValueString()
-	region := identityData.Region.ValueString()
-	ctx = tflog.SetField(ctx, "project_id", projectId)
-	ctx = tflog.SetField(ctx, "region", region)
-
-	// TODO: Read API call logic
-
-	// Save updated data into Terraform state
-	resp.Diagnostics.Append(resp.State.Set(ctx, &data)...)
-
-	// TODO: Set data returned by API in identity
-	identity := {{.NamePascal}}ResourceIdentityModel{
-		ProjectID:  types.StringValue(projectId),
-		Region:     types.StringValue(region),
-		// InstanceID: types.StringValue(instanceId),
-	}
-	resp.Diagnostics.Append(resp.Identity.Set(ctx, identity)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	tflog.Info(ctx, "{{.PackageName}}.{{.NamePascal}} read")
-}
-
-func (r *{{.NameCamel}}Resource) Update(ctx context.Context, req resource.UpdateRequest, resp *resource.UpdateResponse) {
-	var data {{.PackageName}}ResGen.{{.NamePascal}}Model
-
-	// Read Terraform prior state data into the model
-	resp.Diagnostics.Append(req.State.Get(ctx, &data)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	ctx = core.InitProviderContext(ctx)
-
-	projectId := data.ProjectId.ValueString()
-	region := data.Region.ValueString()
-	ctx = tflog.SetField(ctx, "project_id", projectId)
-	ctx = tflog.SetField(ctx, "region", region)
-
-	// TODO: Update API call logic
-
-	// TODO: Set data returned by API in identity
-	identity := {{.NamePascal}}ResourceIdentityModel{
-		ProjectID:  types.StringValue(projectId),
-		Region:     types.StringValue(region),
-		// TODO: add missing values
-		{{.NamePascal}}ID: types.StringValue({{.NamePascal}}Id),
-	}
-	resp.Diagnostics.Append(resp.Identity.Set(ctx, identity)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	// Save updated data into Terraform state
-	resp.Diagnostics.Append(resp.State.Set(ctx, &data)...)
-
-	tflog.Info(ctx, "{{.PackageName}}.{{.NamePascal}} updated")
-}
-
-func (r *{{.NameCamel}}Resource) Delete(ctx context.Context, req resource.DeleteRequest, resp *resource.DeleteResponse) {
-	var data {{.PackageName}}ResGen.{{.NamePascal}}Model
-
-	// Read Terraform prior state data into the model
-	resp.Diagnostics.Append(req.State.Get(ctx, &data)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-	// Read identity data
-	var identityData {{.NamePascal}}ResourceIdentityModel
-	resp.Diagnostics.Append(req.Identity.Get(ctx, &identityData)...)
-	if resp.Diagnostics.HasError() {
-		return
-	}
-
-
-	ctx = core.InitProviderContext(ctx)
-
-	projectId := identityData.ProjectID.ValueString()
-	region := identityData.Region.ValueString()
-	ctx = tflog.SetField(ctx, "project_id", projectId)
-	ctx = tflog.SetField(ctx, "region", region)
-
-	// TODO: Delete API call logic
-
-	tflog.Info(ctx, "{{.PackageName}}.{{.NamePascal}} deleted")
-}
-
-// ImportState imports a resource into the Terraform state on success.
-// The expected format of the resource import identifier is: project_id,zone_id,record_set_id
-func (r *{{.NameCamel}}Resource) ImportState(
-	ctx context.Context,
-	req resource.ImportStateRequest,
-	resp *resource.ImportStateResponse,
-) {
-	idParts := strings.Split(req.ID, core.Separator)
-
-	// TODO: Import logic
-	// TODO: fix len and parts itself
-	if len(idParts) < 2 || idParts[0] == "" || idParts[1] == "" {
-		core.LogAndAddError(
-			ctx, &resp.Diagnostics,
-			"Error importing database",
-			fmt.Sprintf(
-				"Expected import identifier with format [project_id],[region],..., got %q",
-				req.ID,
-			),
-		)
-		return
-	}
-
-	resp.Diagnostics.Append(resp.State.SetAttribute(ctx, path.Root("project_id"), idParts[0])...)
-	resp.Diagnostics.Append(resp.State.SetAttribute(ctx, path.Root("region"), idParts[1])...)
-	// ... more ...
-
-	core.LogAndAddWarning(
-		ctx,
-		&resp.Diagnostics,
-		"{{.PackageName | ucfirst}} database imported with empty password",
-		"The database password is not imported as it is only available upon creation of a new database. The password field will be empty.",
-	)
-	tflog.Info(ctx, "{{.PackageName | ucfirst}} {{.NameCamel}} state imported")
-}

generator/cmd/build/templates/util.gotmpl

@@ -1,47 +0,0 @@
-package utils
-
-import (
-	"context"
-	"fmt"
-
-	{{.PackageName}} "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/pkg_gen/{{.PackageName}}"
-
-	"github.com/hashicorp/terraform-plugin-framework/diag"
-	"github.com/stackitcloud/stackit-sdk-go/core/config"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
-)
-
-func ConfigureClient(
-	ctx context.Context,
-	providerData *core.ProviderData,
-	diags *diag.Diagnostics,
-) *{{.PackageName}}.APIClient {
-	apiClientConfigOptions := []config.ConfigurationOption{
-		config.WithCustomAuth(providerData.RoundTripper),
-		utils.UserAgentConfigOption(providerData.Version),
-	}
-	if providerData.{{.PackageName}}CustomEndpoint != "" {
-		apiClientConfigOptions = append(
-			apiClientConfigOptions,
-			config.WithEndpoint(providerData.{{.PackageName}}CustomEndpoint),
-		)
-	} else {
-		apiClientConfigOptions = append(apiClientConfigOptions, config.WithRegion(providerData.GetRegion()))
-	}
-	apiClient, err := {{.PackageName}}.NewAPIClient(apiClientConfigOptions...)
-	if err != nil {
-		core.LogAndAddError(
-			ctx,
-			diags,
-			"Error configuring API client",
-			fmt.Sprintf(
-				"Configuring client: %v. This is an error related to the provider configuration, not to the resource configuration",
-				err,
-			),
-		)
-		return nil
-	}
-
-	return apiClient
-}

generator/cmd/build/templates/util_test.gotmpl

@@ -1,97 +0,0 @@
-package utils
-
-import (
-	"context"
-	"os"
-	"reflect"
-	"testing"
-
-	"github.com/hashicorp/terraform-plugin-framework/diag"
-	sdkClients "github.com/stackitcloud/stackit-sdk-go/core/clients"
-	"github.com/stackitcloud/stackit-sdk-go/core/config"
-	{{.PackageName}} "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/pkg_gen/{{.PackageName}}"
-
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
-)
-
-const (
-	testVersion        = "1.2.3"
-	testCustomEndpoint = "https://sqlserverflex-custom-endpoint.api.stackit.cloud"
-)
-
-func TestConfigureClient(t *testing.T) {
-	/* mock authentication by setting service account token env variable */
-	os.Clearenv()
-	err := os.Setenv(sdkClients.ServiceAccountToken, "mock-val")
-	if err != nil {
-		t.Errorf("error setting env variable: %v", err)
-	}
-
-	type args struct {
-		providerData *core.ProviderData
-	}
-	tests := []struct {
-		name     string
-		args     args
-		wantErr  bool
-		expected *sqlserverflex.APIClient
-	}{
-		{
-			name: "default endpoint",
-			args: args{
-				providerData: &core.ProviderData{
-					Version: testVersion,
-				},
-			},
-			expected: func() *sqlserverflex.APIClient {
-				apiClient, err := sqlserverflex.NewAPIClient(
-					config.WithRegion("eu01"),
-					utils.UserAgentConfigOption(testVersion),
-				)
-				if err != nil {
-					t.Errorf("error configuring client: %v", err)
-				}
-				return apiClient
-			}(),
-			wantErr: false,
-		},
-		{
-			name: "custom endpoint",
-			args: args{
-				providerData: &core.ProviderData{
-					Version:                     testVersion,
-					SQLServerFlexCustomEndpoint: testCustomEndpoint,
-				},
-			},
-			expected: func() *sqlserverflex.APIClient {
-				apiClient, err := sqlserverflex.NewAPIClient(
-					utils.UserAgentConfigOption(testVersion),
-					config.WithEndpoint(testCustomEndpoint),
-				)
-				if err != nil {
-					t.Errorf("error configuring client: %v", err)
-				}
-				return apiClient
-			}(),
-			wantErr: false,
-		},
-	}
-	for _, tt := range tests {
-		t.Run(
-			tt.name, func(t *testing.T) {
-				ctx := context.Background()
-				diags := diag.Diagnostics{}
-
-				actual := ConfigureClient(ctx, tt.args.providerData, &diags)
-				if diags.HasError() != tt.wantErr {
-					t.Errorf("ConfigureClient() error = %v, want %v", diags.HasError(), tt.wantErr)
-				}
-
-				if !reflect.DeepEqual(actual, tt.expected) {
-					t.Errorf("ConfigureClient() = %v, want %v", actual, tt.expected)
-				}
-			},
-		)
-	}
-}

generator/cmd/buildCmd.go

@@ -1,43 +0,0 @@
-package cmd
-
-import (
-	"github.com/spf13/cobra"
-
-	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/generator/cmd/build"
-)
-
-var (
-	skipCleanup  bool
-	skipClone    bool
-	packagesOnly bool
-	verbose      bool
-	debug        bool
-)
-
-var buildCmd = &cobra.Command{
-	Use:   "build",
-	Short: "Build the necessary boilerplate",
-	Long:  `...`,
-	RunE: func(_ *cobra.Command, _ []string) error {
-		b := build.Builder{
-			SkipClone:    skipClone,
-			SkipCleanup:  skipCleanup,
-			PackagesOnly: packagesOnly,
-			Verbose:      verbose,
-			Debug:        debug,
-		}
-		return b.Build()
-	},
-}
-
-func NewBuildCmd() *cobra.Command {
-	return buildCmd
-}
-
-func init() { //nolint:gochecknoinits // This is the standard way to set up Cobra commands
-	buildCmd.Flags().BoolVarP(&skipCleanup, "skip-clean", "c", false, "Skip cleanup steps")
-	buildCmd.Flags().BoolVarP(&debug, "debug", "d", false, "Enable debug output")
-	buildCmd.Flags().BoolVarP(&skipClone, "skip-clone", "g", false, "Skip cloning from git")
-	buildCmd.Flags().BoolVarP(&packagesOnly, "packages-only", "p", false, "Only generate packages")
-	buildCmd.Flags().BoolVarP(&verbose, "verbose", "v", false, "verbose - show more logs")
-}

generator/cmd/examplesCmd.go

@@ -1,114 +0,0 @@
-package cmd
-
-import (
-	"fmt"
-	"os"
-	"path"
-
-	"github.com/spf13/cobra"
-)
-
-var examplesCmd = &cobra.Command{
-	Use:   "examples",
-	Short: "create examples",
-	Long:  `...`,
-	RunE: func(_ *cobra.Command, _ []string) error {
-		// filePathStr := "stackit/internal/services/postgresflexalpha/database/datasources_gen/database_data_source_gen.go"
-		//
-		// src, err := os.ReadFile(filePathStr)
-		// if err != nil {
-		//	return err
-		//}
-		//
-		// i := interp.New(
-		//	interp.Options{
-		//		GoPath:               "/home/henselinm/.asdf/installs/golang/1.25.6/packages",
-		//		BuildTags:            nil,
-		//		Stdin:                nil,
-		//		Stdout:               nil,
-		//		Stderr:               nil,
-		//		Args:                 nil,
-		//		Env:                  nil,
-		//		SourcecodeFilesystem: nil,
-		//		Unrestricted:         false,
-		//	},
-		//)
-		// err = i.Use(i.Symbols("github.com/hashicorp/terraform-plugin-framework-validators"))
-		// if err != nil {
-		//	return err
-		//}
-		// err = i.Use(stdlib.Symbols)
-		// if err != nil {
-		//	return err
-		//}
-		// _, err = i.Eval(string(src))
-		// if err != nil {
-		//	return err
-		//}
-		//
-		// v, err := i.Eval("DatabaseDataSourceSchema")
-		// if err != nil {
-		//	return err
-		//}
-		//
-		// bar := v.Interface().(func(string) string)
-		//
-		// r := bar("Kung")
-		// println(r)
-		//
-		// evalPath, err := i.EvalPath(filePathStr)
-		// if err != nil {
-		//	return err
-		//}
-		//
-		// fmt.Printf("%+v\n", evalPath)
-
-		// _, err = i.Eval(`import "fmt"`)
-		// if err != nil {
-		//	return err
-		//}
-		// _, err = i.Eval(`func Hallo() { fmt.Println("Hi!") }`)
-		// if err != nil {
-		//	return err
-		//}
-
-		// v = i.Symbols("Hallo")
-
-		// fmt.Println(v)
-		return workServices()
-	},
-}
-
-func workServices() error {
-	startPath := path.Join("stackit", "internal", "services")
-
-	services, err := os.ReadDir(startPath)
-	if err != nil {
-		return err
-	}
-
-	for _, entry := range services {
-		if !entry.IsDir() {
-			continue
-		}
-		resources, err := os.ReadDir(path.Join(startPath, entry.Name()))
-		if err != nil {
-			return err
-		}
-		for _, res := range resources {
-			if !res.IsDir() {
-				continue
-			}
-			fmt.Println("Gefunden:", startPath, "subdir", entry.Name(), "resource", res.Name())
-		}
-	}
-	return nil
-}
-
-func NewExamplesCmd() *cobra.Command {
-	return examplesCmd
-}
-
-// func init() { // nolint: gochecknoinits
-//	examplesCmd.Flags().BoolVarP(&example, "example", "e", false, "example")
-//}

generator/cmd/getFieldsCmd.go

@@ -1,148 +0,0 @@
-package cmd
-
-import (
-	"fmt"
-	"go/ast"
-	"go/parser"
-	"go/token"
-	"path"
-	"path/filepath"
-	"strings"
-
-	"github.com/spf13/cobra"
-)
-
-var (
-	inFile   string
-	svcName  string
-	resName  string
-	resType  string
-	filePath string
-)
-
-var getFieldsCmd = &cobra.Command{
-	Use:   "get-fields",
-	Short: "get fields from file",
-	Long:  `...`,
-	PreRunE: func(_ *cobra.Command, _ []string) error {
-		typeStr := "data_source"
-		if resType != "resource" && resType != "datasource" {
-			return fmt.Errorf("--type can only be resource or datasource")
-		}
-
-		if resType == "resource" {
-			typeStr = resType
-		}
-
-		if inFile == "" && svcName == "" && resName == "" {
-			return fmt.Errorf("--infile or --service and --resource must be provided")
-		}
-
-		if inFile != "" {
-			if svcName != "" || resName != "" {
-				return fmt.Errorf("--infile is provided and excludes --service and --resource")
-			}
-			p, err := filepath.Abs(inFile)
-			if err != nil {
-				return err
-			}
-			filePath = p
-			return nil
-		}
-
-		if svcName != "" && resName == "" {
-			return fmt.Errorf("if --service is provided, you MUST also provide --resource")
-		}
-
-		if svcName == "" && resName != "" {
-			return fmt.Errorf("if --resource is provided, you MUST also provide --service")
-		}
-
-		p, err := filepath.Abs(
-			path.Join(
-				"stackit",
-				"internal",
-				"services",
-				svcName,
-				resName,
-				fmt.Sprintf("%ss_gen", resType),
-				fmt.Sprintf("%s_%s_gen.go", resName, typeStr),
-			),
-		)
-		if err != nil {
-			return err
-		}
-		filePath = p
-
-		//// Enum check
-		// switch format {
-		// case "json", "yaml":
-		//default:
-		//	return fmt.Errorf("invalid --format: %s (want json|yaml)", format)
-		//}
-		return nil
-	},
-	RunE: func(_ *cobra.Command, _ []string) error {
-		return getFields(filePath)
-	},
-}
-
-func getFields(f string) error {
-	tokens, err := getTokens(f)
-	if err != nil {
-		return err
-	}
-	for _, item := range tokens {
-		fmt.Printf("%s \n", item)
-	}
-	return nil
-}
-
-func getTokens(fileName string) ([]string, error) {
-	fset := token.NewFileSet()
-	var result []string
-
-	node, err := parser.ParseFile(fset, fileName, nil, parser.ParseComments)
-	if err != nil {
-		return nil, err
-	}
-
-	ast.Inspect(
-		node, func(n ast.Node) bool {
-			// Suche nach Typ-Deklarationen (structs)
-			ts, ok := n.(*ast.TypeSpec)
-			if ok {
-				if strings.Contains(ts.Name.Name, "Model") {
-					ast.Inspect(
-						ts, func(sn ast.Node) bool {
-							tts, tok := sn.(*ast.Field)
-							if tok {
-								result = append(result, tts.Names[0].String())
-							}
-							return true
-						},
-					)
-				}
-			}
-			return true
-		},
-	)
-	return result, nil
-}
-
-func NewGetFieldsCmd() *cobra.Command {
-	return getFieldsCmd
-}
-
-func init() { //nolint:gochecknoinits //this is the only way to add the command to the rootCmd
-	getFieldsCmd.Flags().StringVarP(&inFile, "infile", "i", "", "input filename incl path")
-	getFieldsCmd.Flags().StringVarP(&svcName, "service", "s", "", "service name")
-	getFieldsCmd.Flags().StringVarP(&resName, "resource", "r", "", "resource name")
-	getFieldsCmd.Flags().StringVarP(
-		&resType,
-		"type",
-		"t",
-		"resource",
-		"resource type (data-source or resource [default])",
-	)
-}

generator/cmd/publish/architecture.go

@@ -1,137 +0,0 @@
-package publish
-
-import (
-	"encoding/json"
-	"fmt"
-	"log"
-	"net/url"
-	"os"
-	"path"
-	"strings"
-)
-
-type Architecture struct {
-	Protocols           []string   `json:"protocols"`
-	OS                  string     `json:"os"`
-	Arch                string     `json:"arch"`
-	FileName            string     `json:"filename"`
-	DownloadUrl         string     `json:"download_url"`
-	ShaSumsUrl          string     `json:"shasums_url"`
-	ShaSumsSignatureUrl string     `json:"shasums_signature_url"`
-	ShaSum              string     `json:"shasum"`
-	SigningKeys         SigningKey `json:"signing_keys"`
-}
-
-type SigningKey struct {
-	GpgPublicKeys []GpgPublicKey `json:"gpg_public_keys"`
-}
-
-type GpgPublicKey struct {
-	KeyId          string `json:"key_id"`
-	AsciiArmor     string `json:"ascii_armor"`
-	TrustSignature string `json:"trust_signature"`
-	Source         string `json:"source"`
-	SourceUrl      string `json:"source_url"`
-}
-
-func (p *Provider) CreateArchitectureFiles() error {
-	log.Println("* Creating architecture files in target directories")
-
-	prefix := path.Join("v1", "providers", p.Namespace, p.Provider, p.Version)
-
-	pathPrefix := path.Join("release", prefix)
-
-	urlPrefix, err := url.JoinPath("https://", p.Domain, prefix)
-	if err != nil {
-		return fmt.Errorf("error creating base url: %w", err)
-	}
-
-	downloadUrlPrefix, err := url.JoinPath(urlPrefix, "download")
-	if err != nil {
-		return fmt.Errorf("error crearting download url: %w", err)
-	}
-	downloadPathPrefix := path.Join(pathPrefix, "download")
-
-	shasumsUrl, err := url.JoinPath(urlPrefix, fmt.Sprintf("%s_%s_SHA256SUMS", p.RepoName, p.Version))
-	if err != nil {
-		return fmt.Errorf("error creating shasums url: %w", err)
-	}
-	shasumsSigUrl := shasumsUrl + ".sig"
-
-	gpgAsciiPub, err := p.ReadGpgFile()
-	if err != nil {
-		return err
-	}
-
-	shaSums, err := p.GetShaSums()
-	if err != nil {
-		return err
-	}
-	for _, sum := range shaSums {
-		downloadUrl, err := url.JoinPath(downloadUrlPrefix, sum.Path)
-		if err != nil {
-			return fmt.Errorf("error creating url: %w", err)
-		}
-
-		// get os and arch from filename
-		removeFileExtension := strings.Split(sum.Path, ".zip")
-		fileNameSplit := strings.Split(removeFileExtension[0], "_")
-
-		// Get build target and architecture from the zip file name
-		target := fileNameSplit[2]
-		arch := fileNameSplit[3]
-
-		// build filepath
-		archFileName := path.Join(downloadPathPrefix, target, arch)
-
-		a := Architecture{
-			Protocols:           []string{"5.1", "6.0"},
-			OS:                  target,
-			Arch:                arch,
-			FileName:            sum.Path,
-			DownloadUrl:         downloadUrl,
-			ShaSumsUrl:          shasumsUrl,
-			ShaSumsSignatureUrl: shasumsSigUrl,
-			ShaSum:              sum.Sum,
-			SigningKeys:         SigningKey{},
-		}
-
-		a.SigningKeys = SigningKey{
-			GpgPublicKeys: []GpgPublicKey{
-				{
-					KeyId:          p.GpgFingerprint,
-					AsciiArmor:     gpgAsciiPub,
-					TrustSignature: "",
-					Source:         "",
-					SourceUrl:      "",
-				},
-			},
-		}
-
-		log.Printf("  - Arch file: %s", archFileName)
-
-		err = WriteArchitectureFile(archFileName, a)
-		if err != nil {
-			return err
-		}
-	}
-
-	return nil
-}
-
-func WriteArchitectureFile(filePath string, arch Architecture) error {
-	jsonString, err := json.Marshal(arch)
-	if err != nil {
-		return fmt.Errorf("error encoding data: %w", err)
-	}
-	//nolint:gosec // this file is not sensitive, so we can use os.ModePerm
-	err = os.WriteFile(
-		filePath,
-		jsonString,
-		os.ModePerm,
-	)
-	if err != nil {
-		return fmt.Errorf("error writing data: %w", err)
-	}
-	return nil
-}

generator/cmd/publish/gpg.go

@@ -1,14 +0,0 @@
-package publish
-
-import (
-	"fmt"
-	"strings"
-)
-
-func (p *Provider) ReadGpgFile() (string, error) {
-	gpgFile, err := ReadFile(p.GpgPubKeyFile)
-	if err != nil {
-		return "", fmt.Errorf("error reading '%s' file: %w", p.GpgPubKeyFile, err)
-	}
-	return strings.Join(gpgFile, "\n"), nil
-}

generator/cmd/publish/provider.go

@@ -1,297 +0,0 @@
-package publish
-
-import (
-	"bufio"
-	"errors"
-	"fmt"
-	"io"
-	"io/fs"
-	"log"
-	"log/slog"
-	"os"
-	"os/exec"
-	"path"
-	"strings"
-)
-
-type Provider struct {
-	RootPath       string
-	Namespace      string
-	Provider       string
-	DistPath       string
-	RepoName       string
-	Version        string
-	GpgFingerprint string
-	GpgPubKeyFile  string
-	Domain         string
-}
-
-func (p *Provider) GetRoot() error {
-	cmd := exec.Command("git", "rev-parse", "--show-toplevel")
-	out, err := cmd.Output()
-	if err != nil {
-		return err
-	}
-	lines := strings.Split(string(out), "\n")
-	p.RootPath = lines[0]
-	return nil
-}
-
-func (p *Provider) CreateV1Dir() error {
-	// Path to semantic version dir
-	versionPath := p.providerDirs()
-
-	// Files to create under v1/providers/[namespace]/[provider_name]
-	err := p.createVersionsFile()
-	if err != nil {
-		return fmt.Errorf("[CreateV1Dir] - create versions file:%w", err)
-	} // Creates version file one above download, which is why downloadPath isn't used
-
-	// Files/Directories to create under v1/providers/[namespace]/[provider_name]/[version]
-	err = p.copyShaFiles(versionPath)
-	if err != nil {
-		return fmt.Errorf("[CreateV1Dir] - copy sha files: %w", err)
-	}
-
-	log.Printf("* Creating download/ in %s directory", versionPath)
-	downloadsPath := path.Join(versionPath, "download")
-	err = CreateDir(downloadsPath)
-	if err != nil {
-		return err
-	}
-
-	// Create darwin, freebsd, linux, windows dirs
-	for _, v := range [4]string{"darwin", "freebsd", "linux", "windows"} {
-		err = CreateDir(path.Join(downloadsPath, v))
-		if err != nil {
-			return fmt.Errorf("error creating dir '%s': %w", path.Join(downloadsPath, v), err)
-		}
-	}
-
-	// Copy all zips
-	err = p.copyBuildZips(downloadsPath)
-	if err != nil {
-		return err
-	}
-
-	// Create all individual files for build targets and each architecture for the build targets
-	err = p.CreateArchitectureFiles()
-	if err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func (p *Provider) copyBuildZips(destPath string) error {
-	log.Println("* Copying build zips")
-
-	shaSums, err := p.GetShaSums()
-	if err != nil {
-		return err
-	}
-
-	// Loop through and copy each
-	for _, sum := range shaSums {
-		zipSrcPath := path.Join(p.DistPath, sum.Path)
-		zipDestPath := path.Join(destPath, sum.Path)
-
-		log.Printf("  - Zip Source: %s", zipSrcPath)
-		log.Printf("   - Zip Dest:  %s", zipDestPath)
-
-		// Copy the zip
-		_, err = CopyFile(zipSrcPath, zipDestPath)
-		if err != nil {
-			return fmt.Errorf("error copying file '%s': %w", zipSrcPath, err)
-		}
-	}
-
-	return nil
-}
-
-func (p *Provider) copyShaFiles(destPath string) error {
-	log.Printf("* Copying SHA files in %s directory", p.DistPath)
-
-	// Copy files from srcPath
-	shaSum := p.RepoName + "_" + p.Version + "_SHA256SUMS"
-	shaSumPath := path.Join(p.DistPath, shaSum)
-
-	// _SHA256SUMS file
-	_, err := CopyFile(shaSumPath, path.Join(destPath, shaSum))
-	if err != nil {
-		return err
-	}
-
-	// _SHA256SUMS.sig file
-	_, err = CopyFile(shaSumPath+".sig", path.Join(destPath, shaSum+".sig"))
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func (p *Provider) createVersionsFile() error {
-	log.Println("* Writing to release/v1/providers/[namespace]/[repo]/versions file")
-
-	versionPath := path.Join("release", "v1", "providers", p.Namespace, p.Provider, "versions")
-
-	shasums, err := p.GetShaSums()
-	if err != nil {
-		return fmt.Errorf("error getting sha sums: %w", err)
-	}
-
-	// Build the versions file...
-	version := Version{
-		Version:   p.Version,
-		Protocols: []string{"5.1", "6.1"},
-		Platforms: nil,
-	}
-	for _, sum := range shasums {
-		// get os and arch from filename
-		removeFileExtension := strings.Split(sum.Path, ".zip")
-		if len(removeFileExtension) < 1 {
-			log.Fatalf("error: %s does not have .zip extension", sum.Path)
-		}
-		fileNameSplit := strings.Split(removeFileExtension[0], "_")
-		if len(fileNameSplit) < 4 {
-			log.Fatalf("filename does not match our regex: %s", removeFileExtension[0])
-		}
-
-		// Get build target and architecture from the zip file name
-		target := fileNameSplit[2]
-		arch := fileNameSplit[3]
-
-		version.Platforms = append(
-			version.Platforms, Platform{
-				OS:   target,
-				Arch: arch,
-			},
-		)
-	}
-
-	data := Data{}
-
-	downloadPath := path.Join(p.Domain, "v1", "providers", p.Namespace, p.Provider, "versions")
-	err = data.LoadFromUrl(fmt.Sprintf("https://%s", downloadPath))
-	if err != nil {
-		slog.Warn("error getting existing versions file, start with empty")
-		// TODO: create flag for first use or make it more robust
-		// return fmt.Errorf("error getting existing versions file: %w", err)
-	}
-
-	err = data.AddVersion(version)
-	if err != nil {
-		return fmt.Errorf("error appending version: %w", err)
-	}
-
-	err = data.WriteToFile(versionPath)
-	if err != nil {
-		return fmt.Errorf("error saving file '%s':%w", versionPath, err)
-	}
-
-	return nil
-}
-
-func (p *Provider) providerDirs() string {
-	log.Println("* Creating release/v1/providers/[namespace]/[provider]/[version] directories")
-
-	target := path.Join("release", "v1", "providers", p.Namespace, p.Provider, p.Version)
-
-	err := CreateDir(target)
-	if err != nil {
-		return ""
-	}
-	return target
-}
-
-func (p *Provider) CreateWellKnown() error {
-	log.Println("* Creating .well-known directory")
-	pathString := path.Join(p.RootPath, "release", ".well-known")
-
-	//nolint:gosec // this file is not sensitive, so we can use ModePerm
-	err := os.MkdirAll(pathString, os.ModePerm)
-	if err != nil && !errors.Is(err, fs.ErrExist) {
-		return fmt.Errorf("error creating '%s' dir: %w", pathString, err)
-	}
-
-	log.Println("  - Writing to .well-known/terraform.json file")
-
-	//nolint:gosec // this file is not sensitive, so we can use 0644
-	err = os.WriteFile(
-		fmt.Sprintf("%s/terraform.json", pathString),
-		[]byte(`{"providers.v1": "/v1/providers/"}`),
-		0o644,
-	)
-	if err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func CreateDir(pathValue string) error {
-	log.Printf("* Creating %s directory", pathValue)
-	//nolint:gosec // this file is not sensitive, so we can use ModePerm
-	err := os.MkdirAll(pathValue, os.ModePerm)
-	if errors.Is(err, fs.ErrExist) {
-		return nil
-	}
-	return err
-}
-
-func ReadFile(filePath string) ([]string, error) {
-	rFile, err := os.Open(filePath)
-
-	if err != nil {
-		return nil, err
-	}
-	fileScanner := bufio.NewScanner(rFile)
-	fileScanner.Split(bufio.ScanLines)
-	var fileLines []string
-
-	for fileScanner.Scan() {
-		fileLines = append(fileLines, fileScanner.Text())
-	}
-
-	err = rFile.Close()
-	if err != nil {
-		return nil, err
-	}
-
-	return fileLines, nil
-}
-
-func CopyFile(src, dst string) (int64, error) {
-	sourceFileStat, err := os.Stat(src)
-	if err != nil {
-		return 0, err
-	}
-
-	if !sourceFileStat.Mode().IsRegular() {
-		return 0, fmt.Errorf("%s is not a regular file", src)
-	}
-
-	source, err := os.Open(src)
-	if err != nil {
-		return 0, err
-	}
-	defer func(source *os.File) {
-		err := source.Close()
-		if err != nil {
-			slog.Error("error closing source file", slog.Any("err", err))
-		}
-	}(source)
-
-	destination, err := os.Create(dst)
-	if err != nil {
-		return 0, err
-	}
-	defer func(destination *os.File) {
-		err := destination.Close()
-		if err != nil {
-			slog.Error("error closing destination file", slog.Any("err", err))
-		}
-	}(destination)
-	nBytes, err := io.Copy(destination, source)
-	return nBytes, err
-}

generator/cmd/publish/shasums.go

@@ -1,39 +0,0 @@
-package publish
-
-import (
-	"log/slog"
-	"path"
-	"regexp"
-)
-
-func (p *Provider) GetShaSums() (ShaSums, error) {
-	return GetShaSumContents(p.DistPath, p.RepoName, p.Version)
-}
-
-type ShaSums []ShaSum
-type ShaSum struct {
-	Sum  string
-	Path string
-}
-
-func GetShaSumContents(distPath, repoName, version string) (ShaSums, error) {
-	shaSumFileName := repoName + "_" + version + "_SHA256SUMS"
-	shaSumPath := path.Join(distPath, shaSumFileName)
-
-	shaSumLine, err := ReadFile(shaSumPath)
-	if err != nil {
-		return nil, err
-	}
-
-	regEx := regexp.MustCompile(`([0-9a-fA-F]+)\s+(.+)`)
-	shaSums := ShaSums{}
-	for _, line := range shaSumLine {
-		matches := regEx.FindAllStringSubmatch(line, -1)
-		if len(matches) < 1 {
-			slog.Warn("unable to parse SHA sum line", "line", line)
-			continue
-		}
-		shaSums = append(shaSums, ShaSum{Sum: matches[0][1], Path: matches[0][2]})
-	}
-	return shaSums, nil
-}

generator/cmd/publish/templates/Caddyfile

@@ -1,38 +0,0 @@
-{
-    log {
-            level debug
-        }
-
-
-    filesystem tf s3 {
-                         bucket "terraform-provider-privatepreview"
-                         region eu01
-                         endpoint https://object.storage.eu01.onstackit.cloud
-                         use_path_style
-                     }
-}
-
-tfregistry.sysops.stackit.rocks {
-    encode zstd gzip
-
-    handle_path /docs/* {
-                            root /srv/www
-                            templates
-
-                            @md {
-                                    file {path}
-                                    path *.md
-                                }
-
-                            rewrite @md /markdown.html
-
-                            file_server {
-                                            browse
-                                        }
-                        }
-
-    file_server {
-                    fs tf
-                    browse
-                }
-}

generator/cmd/publish/templates/index.html.gompl

@@ -1,11 +0,0 @@
-<!DOCTYPE html>
-<html lang="de">
-<head>
-    <title>Forwarding | Weiterleitung</title>
-    <meta http-equiv="refresh" content="0; URL=index.md">
-</head>
-<body>
-<a href="index.md">Falls Sie nicht automatisch weitergeleitet werden, klicken Sie bitte hier.</a><br />
-Sie gelangen dann auf unsere Hauptseite
-</body>
-</html>

generator/cmd/publish/templates/index.md.gompl

@@ -1,34 +0,0 @@
----
-page_title: STACKIT provider PrivatePreview
-description: none
----
-
-# provider
-[Provider](docs/index.md)
-
-## PostGreSQL alpha
-### data sources
-
-- [Flavor](docs/data-sources/postgresflexalpha_flavor.md)
-- [Database](docs/data-sources/postgresflexalpha_database.md)
-- [Instance](docs/data-sources/postgresflexalpha_instance.md)
-- [Flavors](docs/data-sources/postgresflexalpha_flavors.md)
-- [User](docs/data-sources/postgresflexalpha_user.md)
-
-### resources
-- [Database](docs/resources/postgresflexalpha_database.md)
-- [Instance](docs/resources/postgresflexalpha_instance.md)
-- [User](docs/resources/postgresflexalpha_user.md)
-
-## SQL Server alpha
-### data sources
-- [Database](docs/data-sources/sqlserverflexalpha_database.md)
-- [Version](docs/data-sources/sqlserverflexalpha_version.md)
-- [User](docs/data-sources/sqlserverflexalpha_user.md)
-- [Flavor](docs/data-sources/sqlserverflexalpha_flavor.md)
-- [Instance](docs/data-sources/sqlserverflexalpha_instance.md)
-
-### resources
-- [Database](docs/resources/sqlserverflexalpha_database.md)
-- [User](docs/resources/sqlserverflexalpha_user.md)
-- [Instance](docs/resources/sqlserverflexalpha_instance.md)

generator/cmd/publish/templates/markdown.html.gompl

@@ -1,79 +0,0 @@
-<!DOCTYPE html>
-{{ $mdFile := .OriginalReq.URL.Path | trimPrefix "/docs" }}
-{{ $md := (include $mdFile | splitFrontMatter) }}
-<html lang="en">
-<head>
-    <title>{{$md.Meta.page_title}}</title>
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css">
-    <link rel="stylesheet" href="/docs/terraform-registry.css">
-</head>
-<body>
-<h1>{{$md.Meta.page_title}}</h1>
-<div class="provider-view">
-    <div class="provider-nav">
-        <nav class="bread-crumbs is-light" aria-label="Provider">
-            <div class="container is-widescreen">
-                <div class="level">
-                    <ul class="provider-nav-breadcrumbs bread-crumbs-list">
-                        <li class="bread-crumbs-item">
-                            <a id="ember20" class="ember-view bread-crumbs-link" href="/">
-                                Main
-                            </a>
-                        </li>
-                    </ul>
-                </div>
-            </div>
-        </nav>
-        <nav class="block-border section-navbar section-header" aria-label="Provider details">
-            <div class="container">
-                <div class="columns is-vcentered">
-                    <div class="column is-4">
-                          <div class="provider-nav-info-header">
-                              <div class="provider-overview-logo">
-                                <span class="provider-logo">
-                                    <img class="github-image" src="https://avatars3.githubusercontent.com/stackitcloud" alt="stackitcloud">
-                                </span>
-                              </div>
-                              <div class="provider-nav-info-origin">
-                                  <h1>PRIVATE PREVIEW</h1>
-                              </div>
-                          </div>
-                    </div>
-                    <div class="column is-8">
-
-                        <ul class="nav-tabs-list nav-tabs tabs">
-
-                            <li class="nav-tabs-item">
-                                <a id="ember30" class="ember-view navbar-item" href="/">
-                                    Overview
-                                </a>
-                            </li>
-
-                        </ul>
-
-                        <div class="provider-nav-provision-wrapper">
-                            <!---->          </div>
-                    </div>
-                </div>
-            </div>
-        </nav>
-    </div>
-
-    <div class="section block-border block-white section-content">
-        <div class="container">
-            <div class="columns columns-provider-docs">
-                <div class="column is-3 column-provider-docs-menu"></div>
-                <article id="provider-docs-content" class="column is-6  provider-docs-content">
-                    <div class="markdown">
-                        <div class="highlighted-code-wrapper">
-                            {{markdown $md.Body}}
-                        </div>
-                    </div>
-                </article>
-                <div class="column is-3 column-provider-docs-menu"></div>
-            </div>
-        </div>
-    </div>
-</div>
-</body>
-</html>

generator/cmd/publish/versions.go

@@ -1,169 +0,0 @@
-package publish
-
-import (
-	"encoding/json"
-	"fmt"
-	"io"
-	"log/slog"
-	"net/http"
-	"net/url"
-	"os"
-)
-
-type Version struct {
-	Version   string     `json:"version"`
-	Protocols []string   `json:"protocols"`
-	Platforms []Platform `json:"platforms"`
-}
-
-type Platform struct {
-	OS   string `json:"os" yaml:"os"`
-	Arch string `json:"arch" yaml:"arch"`
-}
-
-type Data struct {
-	Id       string    `json:"id,omitempty"`
-	Versions []Version `json:"versions"`
-}
-
-func (d *Data) WriteToFile(filePath string) error {
-	// TODO: make it variable
-	d.Id = "tfregistry.sysops.stackit.rocks/mhenselin/stackitprivatepreview"
-
-	jsonString, err := json.Marshal(d)
-	if err != nil {
-		return fmt.Errorf("error encoding data: %w", err)
-	}
-
-	//nolint:gosec // this file is not sensitive, so we can use os.ModePerm
-	err = os.WriteFile(
-		filePath,
-		jsonString,
-		os.ModePerm,
-	)
-	if err != nil {
-		return fmt.Errorf("error writing data: %w", err)
-	}
-	return nil
-}
-
-func (d *Data) AddVersion(v Version) error {
-	var newVersions []Version
-	for _, ver := range d.Versions {
-		if ver.Version != v.Version {
-			newVersions = append(newVersions, ver)
-		}
-	}
-	newVersions = append(newVersions, v)
-	d.Versions = newVersions
-	return nil
-}
-
-func (d *Data) Validate() error {
-	for _, v := range d.Versions {
-		err := v.Validate()
-		if err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-func (d *Data) LoadFromFile(filePath string) error {
-	plan, err := os.ReadFile(filePath)
-	if err != nil {
-		return err
-	}
-	err = json.Unmarshal(plan, &d)
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func (d *Data) LoadFromUrl(uri string) error {
-	u, err := url.ParseRequestURI(uri)
-	if err != nil {
-		return err
-	}
-
-	file, err := os.CreateTemp("", "versions.*.json")
-	if err != nil {
-		return err
-	}
-	defer func(name string) {
-		//nolint:gosec // The file path is generated by os.CreateTemp and is not user-controllable
-		err := os.Remove(name)
-		if err != nil {
-			slog.Error("failed to remove temporary file", slog.Any("err", err))
-		}
-	}(file.Name()) // Clean up
-
-	err = DownloadFile(
-		u.String(),
-		file.Name(),
-	)
-	if err != nil {
-		return err
-	}
-
-	return d.LoadFromFile(file.Name())
-}
-
-func (v *Version) Validate() error {
-	slog.Warn("validation needs to be implemented")
-	return nil
-}
-
-func (v *Version) AddPlatform(p Platform) error {
-	if p.OS == "" || p.Arch == "" {
-		return fmt.Errorf("OS and Arch MUST NOT be empty")
-	}
-	v.Platforms = append(v.Platforms, p)
-	return nil
-}
-
-func (v *Version) AddProtocol(p string) error {
-	if p == "" {
-		return fmt.Errorf("protocol MUST NOT be empty")
-	}
-	v.Protocols = append(v.Protocols, p)
-	return nil
-}
-
-// DownloadFile will download a url and store it in local filepath.
-// It writes to the destination file as it downloads it, without
-// loading the entire file into memory.
-func DownloadFile(urlValue, filepath string) error {
-	// Create the file
-	//nolint:gosec // path traversal is not a concern here, as the filepath is generated by us and not user input
-	out, err := os.Create(filepath)
-	if err != nil {
-		return err
-	}
-	defer func(out *os.File) {
-		err := out.Close()
-		if err != nil {
-			slog.Error("failed to close file", slog.Any("err", err))
-		}
-	}(out)
-
-	// Get the data
-
-	//nolint:gosec,bodyclose // this is a controlled URL, not user input
-	resp, err := http.Get(urlValue)
-	if err != nil {
-		return err
-	}
-	defer func(Body io.ReadCloser) {
-		_ = Body.Close()
-	}(resp.Body)
-
-	// Write the body to file
-	_, err = io.Copy(out, resp.Body)
-	if err != nil {
-		return err
-	}
-
-	return nil
-}

generator/cmd/publishCmd.go

@@ -1,139 +0,0 @@
-package cmd
-
-import (
-	"errors"
-	"fmt"
-	"io/fs"
-	"log"
-	"os"
-	"path"
-	"path/filepath"
-
-	"github.com/spf13/cobra"
-
-	publish2 "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/generator/cmd/publish"
-)
-
-var (
-	namespace      string
-	domain         string
-	providerName   string