package postgresflexalpha import ( "context" _ "embed" "fmt" "math" "net/http" "strings" "time" "github.com/hashicorp/terraform-plugin-framework/path" "github.com/hashicorp/terraform-plugin-framework/resource" "github.com/hashicorp/terraform-plugin-framework/resource/schema" "github.com/hashicorp/terraform-plugin-framework/resource/schema/planmodifier" "github.com/hashicorp/terraform-plugin-framework/types" "github.com/hashicorp/terraform-plugin-framework/types/basetypes" "github.com/hashicorp/terraform-plugin-log/tflog" "github.com/stackitcloud/stackit-sdk-go/core/oapierror" coreUtils "github.com/stackitcloud/stackit-sdk-go/core/utils" "github.com/stackitcloud/stackit-sdk-go/services/postgresflex/v3alpha1api" "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion" "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core" postgresflexalpha "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/postgresflexalpha/instance/resources_gen" postgresflexUtils "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/postgresflexalpha/utils" "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils" wait "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/wait/postgresflexalpha" ) // Ensure the implementation satisfies the expected interfaces. var ( _ resource.Resource = &instanceResource{} _ resource.ResourceWithConfigure = &instanceResource{} _ resource.ResourceWithImportState = &instanceResource{} _ resource.ResourceWithModifyPlan = &instanceResource{} _ resource.ResourceWithValidateConfig = &instanceResource{} ) // NewInstanceResource is a helper function to simplify the provider implementation. func NewInstanceResource() resource.Resource { return &instanceResource{} } // instanceResource is the resource implementation. type instanceResource struct { client *v3alpha1api.APIClient providerData core.ProviderData } type LocalInstanceModel struct { postgresflexalpha.InstanceModel Flavor types.Object `tfsdk:"flavor"` } // Struct corresponding to Model.Flavor type flavorModel struct { Id types.String `tfsdk:"id"` Description types.String `tfsdk:"description"` CPU types.Int64 `tfsdk:"cpu"` RAM types.Int64 `tfsdk:"ram"` } func (r *instanceResource) ValidateConfig( ctx context.Context, req resource.ValidateConfigRequest, resp *resource.ValidateConfigResponse, ) { var data LocalInstanceModel resp.Diagnostics.Append(req.Config.Get(ctx, &data)...) if resp.Diagnostics.HasError() { return } if data.Replicas.IsNull() || data.Replicas.IsUnknown() { resp.Diagnostics.AddAttributeWarning( path.Root("replicas"), "Missing Attribute Configuration", "Expected replicas to be configured. "+ "The resource may return unexpected results.", ) } if data.FlavorId.IsNull() { if data.Flavor.IsUnknown() || data.Flavor.IsNull() { resp.Diagnostics.AddAttributeError( path.Root("flavor"), "Missing Attribute Configuration", "Expected flavor to be configured. "+ "The resource may return unexpected results.", ) } resp.Diagnostics.AddAttributeWarning( path.Root("flavor"), "Attribute Configuration Deprecation", "Using flavor is deprecated, "+ "please use flavor_id instead.", ) } } // ModifyPlan implements resource.ResourceWithModifyPlan. // Use the modifier to set the effective region in the current plan. func (r *instanceResource) ModifyPlan( ctx context.Context, req resource.ModifyPlanRequest, resp *resource.ModifyPlanResponse, ) { // nolint:gocritic // function signature required by Terraform var configModel LocalInstanceModel // skip initial empty configuration to avoid follow-up errors if req.Config.Raw.IsNull() { return } resp.Diagnostics.Append(req.Config.Get(ctx, &configModel)...) if resp.Diagnostics.HasError() { return } var planModel LocalInstanceModel resp.Diagnostics.Append(req.Plan.Get(ctx, &planModel)...) if resp.Diagnostics.HasError() { return } utils.AdaptRegion(ctx, configModel.Region, &planModel.Region, r.providerData.GetRegion(), resp) if resp.Diagnostics.HasError() { return } resp.Diagnostics.Append(resp.Plan.Set(ctx, planModel)...) if resp.Diagnostics.HasError() { return } } // Metadata returns the resource type name. func (r *instanceResource) Metadata(_ context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse) { resp.TypeName = req.ProviderTypeName + "_postgresflexalpha_instance" } // Configure adds the provider configured client to the resource. func (r *instanceResource) Configure( ctx context.Context, req resource.ConfigureRequest, resp *resource.ConfigureResponse, ) { var ok bool r.providerData, ok = conversion.ParseProviderData(ctx, req.ProviderData, &resp.Diagnostics) if !ok { return } apiClient := postgresflexUtils.ConfigureClient(ctx, &r.providerData, &resp.Diagnostics) if resp.Diagnostics.HasError() { return } r.client = apiClient tflog.Info(ctx, "Postgres Flex instance client configured") } /* until tfplugingen framework can handle plan modifiers, we use a function to add them */ //go:embed planModifiers.yaml var modifiersFileByte []byte // Schema defines the schema for the resource. func (r *instanceResource) Schema(ctx context.Context, req resource.SchemaRequest, resp *resource.SchemaResponse) { schemaVar := postgresflexalpha.InstanceResourceSchema(ctx) schemaVar.Attributes["flavor"] = schema.SingleNestedAttribute{ Optional: true, DeprecationMessage: "Please use flavor_id instead.", Attributes: map[string]schema.Attribute{ "id": schema.StringAttribute{ Computed: true, PlanModifiers: []planmodifier.String{ UseStateForUnknownIfFlavorUnchanged(req), }, }, "description": schema.StringAttribute{ Computed: true, PlanModifiers: []planmodifier.String{ UseStateForUnknownIfFlavorUnchanged(req), }, }, "cpu": schema.Int64Attribute{ DeprecationMessage: "Please use flavor_id instead.", Optional: true, }, "ram": schema.Int64Attribute{ DeprecationMessage: "Please use flavor_id instead.", Optional: true, }, }, } schemaVar.Attributes["flavor_id"] = schema.StringAttribute{ Optional: true, Description: "The id of the instance flavor.", MarkdownDescription: "The id of the instance flavor.", } fields, err := utils.ReadModifiersConfig(modifiersFileByte) if err != nil { resp.Diagnostics.AddError("error during read modifiers config file", err.Error()) return } err = utils.AddPlanModifiersToResourceSchema(fields, &schemaVar) if err != nil { resp.Diagnostics.AddError("error adding plan modifiers", err.Error()) return } resp.Schema = schemaVar } // Create creates the resource and sets the initial Terraform state. func (r *instanceResource) Create( ctx context.Context, req resource.CreateRequest, resp *resource.CreateResponse, ) { // nolint:gocritic // function signature required by Terraform var model LocalInstanceModel diags := req.Plan.Get(ctx, &model) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } ctx = core.InitProviderContext(ctx) projectID := model.ProjectId.ValueString() region := model.Region.ValueString() ctx = tflog.SetField(ctx, "project_id", projectID) ctx = tflog.SetField(ctx, "region", region) var netACL []string diag := model.Network.Acl.ElementsAs(ctx, &netACL, false) resp.Diagnostics.Append(diags...) if diag.HasError() { return } // determine flavor ID var flModel = &flavorModel{} if !(model.Flavor.IsNull() || model.Flavor.IsUnknown()) { diags = model.Flavor.As(ctx, flModel, basetypes.ObjectAsOptions{}) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } flavors, err := getAllFlavors(ctx, r.client.DefaultAPI, projectID, region) if err != nil { core.LogAndAddError(ctx, &resp.Diagnostics, "Error reading flavors", fmt.Sprintf("getAllFlavors: %v", err)) return } tflog.Debug(ctx, fmt.Sprintf("loaded flavors: %d", len(flavors))) var foundFlavors []v3alpha1api.ListFlavors for _, flavor := range flavors { if flModel.CPU.ValueInt64() != int64(flavor.Cpu) { // tflog.Debug(ctx, fmt.Sprintf("flavor - cpu did not match (%d - %d)", flModel.CPU.ValueInt64(), flavor.Cpu)) continue } if flModel.RAM.ValueInt64() != int64(flavor.Memory) { // tflog.Debug(ctx, fmt.Sprintf("flavor - ram did not match (%d - %d)", flModel.RAM.ValueInt64(), flavor.Memory)) continue } tmpNodeType := "Single" if model.Replicas.ValueInt64() > 1 { tmpNodeType = "Replica" } if strings.ToLower(tmpNodeType) != strings.ToLower(flavor.NodeType) { //tflog.Debug( // ctx, // fmt.Sprintf( // "flavor - nodeType did not match ('%s' - '%s')", // strings.ToLower(tmpNodeType), // strings.ToLower(flavor.NodeType), // ), //) continue } tflog.Debug(ctx, fmt.Sprintf("found flavor %s, checking storage classes", flavor.Id)) for _, sc := range flavor.StorageClasses { if model.Storage.PerformanceClass.ValueString() != sc.Class { continue } tflog.Debug(ctx, fmt.Sprintf("found storage class '%s' for flavor '%s', checking storage classes", sc.Class, flavor.Id)) foundFlavors = append(foundFlavors, flavor) } } if len(foundFlavors) == 0 { resp.Diagnostics.AddError("get flavor", "could not find requested flavor") return } if len(foundFlavors) > 1 { resp.Diagnostics.AddError("get flavor", "found too many matching flavors") return } f := foundFlavors[0] flModel.Description = types.StringValue(f.Description) flModel.Id = utils.BuildInternalTerraformId(model.ProjectId.ValueString(), region, f.Id) model.FlavorId = types.StringValue(f.Id) //flModel. .MaxGb = types.Int32Value(f.MaxGB) //flModel.MinGb = types.Int32Value(f.MinGB) } replVal := model.Replicas.ValueInt64() // nolint:gosec // check is performed above payload := modelToCreateInstancePayload(netACL, model, replVal) // Create new instance createResp, err := r.client.DefaultAPI.CreateInstanceRequest( ctx, projectID, region, ).CreateInstanceRequestPayload(payload).Execute() if err != nil { core.LogAndAddError(ctx, &resp.Diagnostics, "error creating instance", fmt.Sprintf("Calling API: %v", err)) return } ctx = core.LogResponse(ctx) instanceID, ok := createResp.GetIdOk() if !ok { core.LogAndAddError(ctx, &resp.Diagnostics, "error creating instance", "could not find instance id in response") return } // Set data returned by API in id resp.Diagnostics.Append( resp.State.SetAttribute( ctx, path.Root("id"), utils.BuildInternalTerraformId(projectID, region, *instanceID), )..., ) waitResp, err := wait.CreateInstanceWaitHandler(ctx, r.client.DefaultAPI, projectID, region, *instanceID). SetTimeout(90 * time.Minute). SetSleepBeforeWait(10 * time.Second). WaitWithContext(ctx) if err != nil { core.LogAndAddError( ctx, &resp.Diagnostics, "Error creating instance", fmt.Sprintf("Wait handler error: %v", err), ) return } err = mapGetInstanceResponseToModel(ctx, &model, waitResp) if err != nil { core.LogAndAddError( ctx, &resp.Diagnostics, "Error creating instance", fmt.Sprintf("Error creating model: %v", err), ) return } // Set state to fully populated data diags = resp.State.Set(ctx, model) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } tflog.Info(ctx, "Postgres Flex instance created") } func modelToCreateInstancePayload( netACL []string, model LocalInstanceModel, replVal int64, ) v3alpha1api.CreateInstanceRequestPayload { var enc *v3alpha1api.InstanceEncryption if !model.Encryption.IsNull() && !model.Encryption.IsUnknown() { enc = &v3alpha1api.InstanceEncryption{ KekKeyId: model.Encryption.KekKeyId.ValueString(), KekKeyRingId: model.Encryption.KekKeyRingId.ValueString(), KekKeyVersion: model.Encryption.KekKeyVersion.ValueString(), ServiceAccount: model.Encryption.ServiceAccount.ValueString(), } } payload := v3alpha1api.CreateInstanceRequestPayload{ BackupSchedule: model.BackupSchedule.ValueString(), Encryption: enc, FlavorId: model.FlavorId.ValueString(), Name: model.Name.ValueString(), Network: v3alpha1api.InstanceNetworkCreate{ AccessScope: (*v3alpha1api.InstanceNetworkAccessScope)(model.Network.AccessScope.ValueStringPointer()), Acl: netACL, }, Replicas: v3alpha1api.Replicas(replVal), //nolint:gosec // TODO RetentionDays: int32(model.RetentionDays.ValueInt64()), //nolint:gosec // TODO Storage: v3alpha1api.StorageCreate{ PerformanceClass: model.Storage.PerformanceClass.ValueString(), Size: int32(model.Storage.Size.ValueInt64()), //nolint:gosec // TODO }, Version: model.Version.ValueString(), } return payload } // Read refreshes the Terraform state with the latest data. func (r *instanceResource) Read( ctx context.Context, req resource.ReadRequest, resp *resource.ReadResponse, ) { // nolint:gocritic // function signature required by Terraform functionErrorSummary := "read instance failed" var model LocalInstanceModel diags := req.State.Get(ctx, &model) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } ctx = core.InitProviderContext(ctx) var projectID string if !model.ProjectId.IsNull() && !model.ProjectId.IsUnknown() { projectID = model.ProjectId.ValueString() } var region string if !model.Region.IsNull() && !model.Region.IsUnknown() { region = r.providerData.GetRegionWithOverride(model.Region) } var instanceID string if !model.InstanceId.IsNull() && !model.InstanceId.IsUnknown() { instanceID = model.InstanceId.ValueString() } ctx = tflog.SetField(ctx, "project_id", projectID) ctx = tflog.SetField(ctx, "instance_id", instanceID) ctx = tflog.SetField(ctx, "region", region) instanceResp, err := r.client.DefaultAPI.GetInstanceRequest(ctx, projectID, region, instanceID).Execute() if err != nil { oapiErr, ok := err.(*oapierror.GenericOpenAPIError) //nolint:errorlint //complaining that error.As should be used to catch wrapped errors, but this error should not be wrapped if ok && oapiErr.StatusCode == http.StatusNotFound { resp.State.RemoveResource(ctx) return } core.LogAndAddError(ctx, &resp.Diagnostics, functionErrorSummary, err.Error()) return } ctx = core.LogResponse(ctx) respInstanceID, ok := instanceResp.GetIdOk() if !ok { core.LogAndAddError(ctx, &resp.Diagnostics, functionErrorSummary, "response provided no ID") return } if !model.InstanceId.IsUnknown() && !model.InstanceId.IsNull() { if *respInstanceID != instanceID { core.LogAndAddError( ctx, &resp.Diagnostics, functionErrorSummary, "ID in response did not match ID in state", ) return } } if model.Id.IsUnknown() || model.Id.IsNull() { model.Id = utils.BuildInternalTerraformId(projectID, region, instanceID) } err = mapGetInstanceResponseToModel(ctx, &model, instanceResp) if err != nil { core.LogAndAddError( ctx, &resp.Diagnostics, functionErrorSummary, fmt.Sprintf("Processing API payload: %v", err), ) return } // Set refreshed state resp.Diagnostics.Append(resp.State.Set(ctx, model)...) if resp.Diagnostics.HasError() { return } tflog.Info(ctx, "Postgres Flex instance read") } // Update updates the resource and sets the updated Terraform state on success. func (r *instanceResource) Update( ctx context.Context, req resource.UpdateRequest, resp *resource.UpdateResponse, ) { // nolint:gocritic // function signature required by Terraform var model LocalInstanceModel diags := req.Plan.Get(ctx, &model) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } ctx = core.InitProviderContext(ctx) projectID := model.ProjectId.ValueString() instanceID := model.InstanceId.ValueString() region := model.Region.ValueString() ctx = tflog.SetField(ctx, "project_id", projectID) ctx = tflog.SetField(ctx, "instance_id", instanceID) ctx = tflog.SetField(ctx, "region", region) var netACL []string diag := model.Network.Acl.ElementsAs(ctx, &netACL, false) resp.Diagnostics.Append(diags...) if diag.HasError() { return } if model.Replicas.ValueInt64() > math.MaxInt32 { core.LogAndAddError(ctx, &resp.Diagnostics, "UPDATE", "replicas value too large for int32") return } if model.RetentionDays.ValueInt64() > math.MaxInt32 { core.LogAndAddError(ctx, &resp.Diagnostics, "UPDATE", "retention_days value too large for int32") return } if model.Storage.Size.ValueInt64() > math.MaxInt32 { core.LogAndAddError(ctx, &resp.Diagnostics, "UPDATE", "storage.size value too large for int32") return } payload := v3alpha1api.UpdateInstanceRequestPayload{ BackupSchedule: model.BackupSchedule.ValueString(), FlavorId: model.FlavorId.ValueString(), Name: model.Name.ValueString(), Network: v3alpha1api.InstanceNetworkUpdate{ Acl: netACL, }, Replicas: v3alpha1api.Replicas(model.Replicas.ValueInt64()), //nolint:gosec // checked above RetentionDays: int32(model.RetentionDays.ValueInt64()), //nolint:gosec // checked above Storage: v3alpha1api.StorageUpdate{ Size: coreUtils.Ptr(int32(model.Storage.Size.ValueInt64())), //nolint:gosec // checked above }, Version: model.Version.ValueString(), } // Update existing instance err := r.client.DefaultAPI.UpdateInstanceRequest( ctx, projectID, region, instanceID, ).UpdateInstanceRequestPayload(payload).Execute() if err != nil { core.LogAndAddError(ctx, &resp.Diagnostics, "Error updating instance", err.Error()) return } ctx = core.LogResponse(ctx) waitResp, err := wait.PartialUpdateInstanceWaitHandler( ctx, r.client.DefaultAPI, projectID, region, instanceID, ). SetTimeout(90 * time.Minute). SetSleepBeforeWait(10 * time.Second). WaitWithContext(ctx) if err != nil { core.LogAndAddError( ctx, &resp.Diagnostics, "Error updating instance", fmt.Sprintf("Instance update waiting: %v", err), ) return } err = mapGetInstanceResponseToModel(ctx, &model, waitResp) if err != nil { core.LogAndAddError( ctx, &resp.Diagnostics, "Error updating instance", fmt.Sprintf("Processing API payload: %v", err), ) return } diags = resp.State.Set(ctx, model) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } tflog.Info(ctx, "Postgresflex instance updated") } // Delete deletes the resource and removes the Terraform state on success. func (r *instanceResource) Delete( ctx context.Context, req resource.DeleteRequest, resp *resource.DeleteResponse, ) { // nolint:gocritic // function signature required by Terraform var model LocalInstanceModel diags := req.State.Get(ctx, &model) resp.Diagnostics.Append(diags...) if resp.Diagnostics.HasError() { return } ctx = core.InitProviderContext(ctx) projectID := model.ProjectId.ValueString() instanceID := model.InstanceId.ValueString() region := model.Region.ValueString() ctx = tflog.SetField(ctx, "project_id", projectID) ctx = tflog.SetField(ctx, "instance_id", instanceID) ctx = tflog.SetField(ctx, "region", region) // Delete existing instance err := r.client.DefaultAPI.DeleteInstanceRequest(ctx, projectID, region, instanceID).Execute() if err != nil { core.LogAndAddError(ctx, &resp.Diagnostics, "Error deleting instance", fmt.Sprintf("Calling API: %v", err)) return } ctx = core.LogResponse(ctx) _, err = r.client.DefaultAPI.GetInstanceRequest(ctx, projectID, region, instanceID).Execute() if err != nil { oapiErr, ok := err.(*oapierror.GenericOpenAPIError) //nolint:errorlint //complaining that error.As should be used to catch wrapped errors, but this error should not be wrapped if ok && oapiErr.StatusCode != http.StatusNotFound { core.LogAndAddError(ctx, &resp.Diagnostics, "Error deleting instance", err.Error()) return } } resp.State.RemoveResource(ctx) tflog.Info(ctx, "Postgres Flex instance deleted") } // ImportState imports a resource into the Terraform state on success. // The expected format of the resource import identifier is: project_id,region,instance_id func (r *instanceResource) ImportState( ctx context.Context, req resource.ImportStateRequest, resp *resource.ImportStateResponse, ) { ctx = core.InitProviderContext(ctx) idParts := strings.Split(req.ID, core.Separator) if len(idParts) != 3 || idParts[0] == "" || idParts[1] == "" || idParts[2] == "" { core.LogAndAddError( ctx, &resp.Diagnostics, "Error importing instance", fmt.Sprintf( "Expected import identifier with format [project_id],[region],[instance_id] Got: %q", req.ID, ), ) return } resp.Diagnostics.Append( resp.State.SetAttribute( ctx, path.Root("id"), utils.BuildInternalTerraformId(idParts...), )..., ) resp.Diagnostics.Append(resp.State.SetAttribute(ctx, path.Root("project_id"), idParts[0])...) resp.Diagnostics.Append(resp.State.SetAttribute(ctx, path.Root("region"), idParts[1])...) resp.Diagnostics.Append(resp.State.SetAttribute(ctx, path.Root("instance_id"), idParts[2])...) tflog.Info(ctx, "Postgres Flex instance state imported") }