package observability_test

import (
	"context"
	"fmt"
	"strings"
	"testing"

	"github.com/hashicorp/terraform-plugin-testing/helper/acctest"
	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
	"github.com/hashicorp/terraform-plugin-testing/terraform"
	"github.com/stackitcloud/stackit-sdk-go/core/config"
	"github.com/stackitcloud/stackit-sdk-go/core/utils"
	"github.com/stackitcloud/stackit-sdk-go/services/observability"
	"github.com/stackitcloud/stackit-sdk-go/services/observability/wait"
	"github.com/stackitcloud/terraform-provider-stackit/stackit/internal/core"
	"github.com/stackitcloud/terraform-provider-stackit/stackit/internal/testutil"
)

var instanceResource = map[string]string{
	"project_id":                             testutil.ProjectId,
	"name":                                   testutil.ResourceNameWithDateTime("observability"),
	"plan_name":                              "Observability-Monitoring-Basic-EU01",
	"new_plan_name":                          "Observability-Monitoring-Medium-EU01",
	"acl-0":                                  "1.2.3.4/32",
	"acl-1":                                  "111.222.111.222/32",
	"acl-1-updated":                          "111.222.111.125/32",
	"metrics_retention_days":                 "60",
	"metrics_retention_days_5m_downsampling": "30",
	"metrics_retention_days_1h_downsampling": "15",
}

var scrapeConfigResource = map[string]string{
	"project_id":                  testutil.ProjectId,
	"name":                        fmt.Sprintf("scrapeconfig-%s", acctest.RandStringFromCharSet(7, acctest.CharSetAlphaNum)),
	"urls":                        fmt.Sprintf(`{urls = ["www.%s.de","%s.de"]}`, acctest.RandStringFromCharSet(15, acctest.CharSetAlphaNum), acctest.RandStringFromCharSet(15, acctest.CharSetAlphaNum)),
	"metrics_path":                "/metrics",
	"scheme":                      "https",
	"scrape_interval":             "4m", // non-default
	"sample_limit":                "7",  // non-default
	"saml2_enable_url_parameters": "false",
}

var credentialResource = map[string]string{
	"project_id": testutil.ProjectId,
}

func buildAlertConfigReceivers(hasOpsGenie, hasEmail, hasWebhook bool) string {
	if !hasOpsGenie && !hasEmail && !hasWebhook {
		return ""
	}

	receivers := "["

	if hasOpsGenie {
		receivers += `
      {
        name = "OpsGenieReceiverInfo"
        opsgenie_configs = [
          {
            tags    = "iam,observability-alert"
            api_key = "example-api-key"
          }
        ]
      },
`
	}

	if hasEmail {
		receivers += `
	{
		name = "EmailReceiverInfo"
		email_configs = [
			{
				to = "me@example.com"
			},
		]
	},
`
	}

	if hasWebhook {
		receivers += `
      {
        name = "WebhookReceiverInfo"
        webhooks_configs = [
          {
            url      = "https://example.com"
            ms_teams = true
          },
        ]
      },
`
	}

	return receivers + "]"
}

func buildAlertConfigRoute(childRoutes bool) string {
	route := `{
      receiver        = "OpsGenieReceiverInfo"
      group_by        = ["alertname"]
      group_interval  = "10m"
      group_wait      = "1m"
      repeat_interval = "1h"`

	if childRoutes {
		route += `
	  routes = [
        {
          match = {
            severity = "critical"
          }
          receiver = "OpsGenieReceiverInfo"
        },
        {
          match = {
            severity = "warning"
          }
          receiver = "WebhookReceiverInfo"
        }
	  ]`
	}

	return route + "\n}"
}

func buildAlertConfigGlobal(includeEmailOptions bool) string {
	defaultOptions := `{
    	resolve_timeout = "5m"
		opsgenie_api_key = "example-api-key"
    	opsgenie_api_url = "https://api.eu.opsgenie.com"`

	if !includeEmailOptions {
		return defaultOptions + "\n}"
	}
	return defaultOptions + `
		smtp_smart_host = "smtp.example.com:587"
		smtp_from = "me@example.com"
}`
}

func buildAlertConfig(receivers, route, global string) *string {
	if receivers == "" && route == "" && global == "" {
		return nil
	}
	returnStr := fmt.Sprintf(`
	alert_config = {
		receivers = %s,
		route = %s,
		global = %s
	}
	`, receivers, route, global)
	return &returnStr
}

func instanceResourceConfig(acl, metricsRetentionDays, metricsRetentionDays1hDownsampling, metricsRetentionDays5mDownsampling, alertConfig *string, instanceName, planName string) string {
	var aclStr string
	var metricsRetentionDaysStr string
	var metricsRetentionDays1hDownsamplingStr string
	var metricsRetentionDays5mDownsamplingStr string
	var alertConfigStr string

	if acl != nil {
		aclStr = fmt.Sprintf("acl = %s", *acl)
	}

	if metricsRetentionDays != nil {
		metricsRetentionDaysStr = fmt.Sprintf("metrics_retention_days = %s", *metricsRetentionDays)
	}

	if metricsRetentionDays1hDownsampling != nil {
		metricsRetentionDays1hDownsamplingStr = fmt.Sprintf("metrics_retention_days_1h_downsampling = %s", *metricsRetentionDays1hDownsampling)
	}

	if metricsRetentionDays5mDownsampling != nil {
		metricsRetentionDays5mDownsamplingStr = fmt.Sprintf("metrics_retention_days_5m_downsampling = %s", *metricsRetentionDays5mDownsampling)
	}

	if alertConfig != nil {
		alertConfigStr = *alertConfig
	}

	optionalsStr := strings.Join([]string{aclStr, metricsRetentionDaysStr, metricsRetentionDays1hDownsamplingStr, metricsRetentionDays5mDownsamplingStr, alertConfigStr}, "\n")

	return fmt.Sprintf(`
		resource "stackit_observability_instance" "instance" {
			project_id = "%s"
			name      = "%s"
			plan_name = "%s"
			%s
		}
	`,
		instanceResource["project_id"],
		instanceName,
		planName,
		optionalsStr,
	)
}

func scrapeConfigResourceConfig(target, saml2EnableUrlParameters string) string {
	return fmt.Sprintf(
		`resource "stackit_observability_scrapeconfig" "scrapeconfig" {
		project_id = stackit_observability_instance.instance.project_id
		instance_id = stackit_observability_instance.instance.instance_id
		name = "%s"
		metrics_path = "%s"
		targets = [%s]
		scrape_interval = "%s"
		sample_limit = %s
		saml2 = { 
			enable_url_parameters = %s
		}
	}`,
		scrapeConfigResource["name"],
		scrapeConfigResource["metrics_path"],
		target,
		scrapeConfigResource["scrape_interval"],
		scrapeConfigResource["sample_limit"],
		saml2EnableUrlParameters,
	)
}

func credentialResourceConfig() string {
	return `resource "stackit_observability_credential" "credential" {
		project_id = stackit_observability_instance.instance.project_id
		instance_id = stackit_observability_instance.instance.instance_id
	}`
}

func resourceConfig(acl, metricsRetentionDays, metricsRetentionDays1hDownsampling, metricsRetentionDays5mDownsampling, alertConfig *string, instanceName, planName, target, saml2EnableUrlParameters string) string {
	return fmt.Sprintf("%s\n\n%s\n\n%s\n\n%s",
		testutil.ObservabilityProviderConfig(),
		instanceResourceConfig(acl,
			metricsRetentionDays,
			metricsRetentionDays1hDownsampling,
			metricsRetentionDays5mDownsampling,
			alertConfig,
			instanceName,
			planName),
		scrapeConfigResourceConfig(target, saml2EnableUrlParameters),
		credentialResourceConfig(),
	)
}

func TestAccResource(t *testing.T) {
	resource.Test(t, resource.TestCase{
		ProtoV6ProviderFactories: testutil.TestAccProtoV6ProviderFactories,
		CheckDestroy:             testAccCheckObservabilityDestroy,
		Steps: []resource.TestStep{
			// Creation
			{
				Config: resourceConfig(
					utils.Ptr(fmt.Sprintf(
						"[%q, %q, %q]",
						instanceResource["acl-0"],
						instanceResource["acl-1"],
						instanceResource["acl-1"],
					)),
					utils.Ptr(instanceResource["metrics_retention_days"]),
					utils.Ptr(instanceResource["metrics_retention_days_1h_downsampling"]),
					utils.Ptr(instanceResource["metrics_retention_days_5m_downsampling"]),
					buildAlertConfig(buildAlertConfigReceivers(true, false, true), buildAlertConfigRoute(false), buildAlertConfigGlobal(false)),
					instanceResource["name"],
					instanceResource["plan_name"],
					scrapeConfigResource["urls"],
					scrapeConfigResource["saml2_enable_url_parameters"],
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance data
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "name", instanceResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "plan_name", instanceResource["plan_name"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "dashboard_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "is_updatable"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_public_read_access"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_user"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_password"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days", instanceResource["metrics_retention_days"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days_5m_downsampling", instanceResource["metrics_retention_days_5m_downsampling"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days_1h_downsampling", instanceResource["metrics_retention_days_1h_downsampling"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "targets_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "alerting_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_ui_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "otlp_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "zipkin_spans_url"),

					// Alert Config
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.0", "alertname"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_interval", "10m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_wait", "1m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.repeat_interval", "1h"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.resolve_timeout", "5m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.opsgenie_api_key", "example-api-key"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.opsgenie_api_url", "https://api.eu.opsgenie.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.receiver", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.0", "alertname"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_interval", "10m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_wait", "1m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.repeat_interval", "1h"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.#", "0"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.name", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.0.tags", "iam,observability-alert"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.0.api_key",
						"example-api-key"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.name", "WebhookReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.webhooks_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.webhooks_configs.0.url", "https://example.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.webhooks_configs.0.ms_teams", "true"),

					// ACL
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.0", instanceResource["acl-0"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.1", instanceResource["acl-1"]),

					// scrape config data
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "project_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "project_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "instance_id",
					),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "targets.0.urls.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", scrapeConfigResource["saml2_enable_url_parameters"]),

					// credentials
					resource.TestCheckResourceAttr("stackit_observability_credential.credential", "project_id", credentialResource["project_id"]),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_credential.credential", "instance_id",
					),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "username"),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "password"),
				),
			},
			// Update Alert Config with complete Receiver (email, webhook and opsgenie configs), global options and Route with child routes
			{
				Config: resourceConfig(
					utils.Ptr(fmt.Sprintf(
						"[%q, %q, %q]",
						instanceResource["acl-0"],
						instanceResource["acl-1"],
						instanceResource["acl-1"],
					)),
					utils.Ptr(instanceResource["metrics_retention_days"]),
					utils.Ptr(instanceResource["metrics_retention_days_1h_downsampling"]),
					utils.Ptr(instanceResource["metrics_retention_days_5m_downsampling"]),
					buildAlertConfig(buildAlertConfigReceivers(true, true, true), buildAlertConfigRoute(true), buildAlertConfigGlobal(true)),
					instanceResource["name"],
					instanceResource["plan_name"],
					scrapeConfigResource["urls"],
					scrapeConfigResource["saml2_enable_url_parameters"],
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance data
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "name", instanceResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "plan_name", instanceResource["plan_name"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "dashboard_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "is_updatable"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_public_read_access"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_user"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_password"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days", instanceResource["metrics_retention_days"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days_5m_downsampling", instanceResource["metrics_retention_days_5m_downsampling"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days_1h_downsampling", instanceResource["metrics_retention_days_1h_downsampling"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "targets_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "alerting_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_ui_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "otlp_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "zipkin_spans_url"),

					// Alert Config
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.#", "3"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.0", "alertname"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_interval", "10m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_wait", "1m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.repeat_interval", "1h"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.resolve_timeout", "5m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.opsgenie_api_key", "example-api-key"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.opsgenie_api_url", "https://api.eu.opsgenie.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.smtp_smart_host", "smtp.example.com:587"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.smtp_from", "me@example.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.receiver", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.0", "alertname"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_interval", "10m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_wait", "1m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.repeat_interval", "1h"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.0.match.severity", "critical"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.0.receiver", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.1.match.severity", "warning"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.1.receiver", "WebhookReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.name", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.0.tags", "iam,observability-alert"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.0.api_key",
						"example-api-key"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.name", "EmailReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.email_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.email_configs.0.to", "me@example.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.2.name", "WebhookReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.2.webhooks_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.2.webhooks_configs.0.url", "https://example.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.2.webhooks_configs.0.ms_teams", "true"),

					// ACL
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.0", instanceResource["acl-0"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.1", instanceResource["acl-1"]),

					// scrape config data
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "project_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "project_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "instance_id",
					),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "targets.0.urls.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", scrapeConfigResource["saml2_enable_url_parameters"]),

					// credentials
					resource.TestCheckResourceAttr("stackit_observability_credential.credential", "project_id", credentialResource["project_id"]),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_credential.credential", "instance_id",
					),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "username"),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "password"),
				),
			},
			// Update without ACL, partial metrics retention days and NO alert configs
			{
				Config: resourceConfig(
					nil,
					nil,
					utils.Ptr(instanceResource["metrics_retention_days_1h_downsampling"]),
					nil,
					nil,
					instanceResource["name"],
					instanceResource["plan_name"],
					scrapeConfigResource["urls"],
					scrapeConfigResource["saml2_enable_url_parameters"],
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance data
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "name", instanceResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "plan_name", instanceResource["plan_name"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "dashboard_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "is_updatable"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_public_read_access"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_user"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_password"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_retention_days"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_retention_days_5m_downsampling"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "metrics_retention_days_1h_downsampling", instanceResource["metrics_retention_days_1h_downsampling"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "targets_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "alerting_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_ui_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "otlp_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "zipkin_spans_url"),

					// ACL
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.#", "0"),

					// scrape config data
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "project_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "project_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "instance_id",
					),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "targets.0.urls.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", scrapeConfigResource["saml2_enable_url_parameters"]),

					// credentials
					resource.TestCheckResourceAttr("stackit_observability_credential.credential", "project_id", credentialResource["project_id"]),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_credential.credential", "instance_id",
					),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "username"),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "password"),
				),
			},
			// Update with empty ACL, NO metrics retention days and NO alert configs
			{
				Config: resourceConfig(
					utils.Ptr("[]"),
					nil,
					nil,
					nil,
					nil,
					instanceResource["name"],
					instanceResource["plan_name"],
					scrapeConfigResource["urls"],
					scrapeConfigResource["saml2_enable_url_parameters"],
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance data
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "name", instanceResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "plan_name", instanceResource["plan_name"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "dashboard_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "is_updatable"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_public_read_access"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_user"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "grafana_initial_admin_password"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_retention_days"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_retention_days_5m_downsampling"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_retention_days_1h_downsampling"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "metrics_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "targets_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "alerting_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "logs_push_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "jaeger_ui_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "otlp_traces_url"),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "zipkin_spans_url"),

					// ACL
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.#", "0"),

					// scrape config data
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "project_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "project_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_scrapeconfig.scrapeconfig", "instance_id",
					),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "targets.0.urls.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", scrapeConfigResource["saml2_enable_url_parameters"]),

					// credentials
					resource.TestCheckResourceAttr("stackit_observability_credential.credential", "project_id", credentialResource["project_id"]),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"stackit_observability_credential.credential", "instance_id",
					),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "username"),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "password"),
				),
			},
			// Data source
			{
				Config: fmt.Sprintf(`
					%s

					data "stackit_observability_instance" "instance" {
					  	project_id  = stackit_observability_instance.instance.project_id
					  	instance_id = stackit_observability_instance.instance.instance_id
					}
					
					data "stackit_observability_scrapeconfig" "scrapeconfig" {
						project_id  = stackit_observability_scrapeconfig.scrapeconfig.project_id 
					  	instance_id = stackit_observability_scrapeconfig.scrapeconfig.instance_id
					  	name        = stackit_observability_scrapeconfig.scrapeconfig.name
					}
					`,
					resourceConfig(
						utils.Ptr(fmt.Sprintf(
							"[%q, %q]",
							instanceResource["acl-0"],
							instanceResource["acl-1"],
						)),
						utils.Ptr(instanceResource["metrics_retention_days"]),
						utils.Ptr(instanceResource["metrics_retention_days_1h_downsampling"]),
						utils.Ptr(instanceResource["metrics_retention_days_5m_downsampling"]),
						buildAlertConfig(buildAlertConfigReceivers(true, false, true), buildAlertConfigRoute(true), buildAlertConfigGlobal(false)),
						instanceResource["name"],
						instanceResource["plan_name"],
						scrapeConfigResource["urls"],
						scrapeConfigResource["saml2_enable_url_parameters"],
					),
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance data
					resource.TestCheckResourceAttr("data.stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("data.stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("data.stackit_observability_instance.instance", "name", instanceResource["name"]),
					resource.TestCheckResourceAttr("data.stackit_observability_instance.instance", "plan_name", instanceResource["plan_name"]),
					resource.TestCheckResourceAttr("data.stackit_observability_instance.instance", "acl.#", "2"),
					resource.TestCheckResourceAttr("data.stackit_observability_instance.instance", "acl.0", instanceResource["acl-0"]),
					resource.TestCheckResourceAttr("data.stackit_observability_instance.instance", "acl.1", instanceResource["acl-1"]),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "project_id",
						"data.stackit_observability_instance.instance", "project_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_instance.instance", "instance_id",
						"data.stackit_observability_instance.instance", "instance_id",
					),
					// scrape config data
					resource.TestCheckResourceAttrPair(
						"stackit_observability_scrapeconfig.scrapeconfig", "project_id",
						"data.stackit_observability_scrapeconfig.scrapeconfig", "project_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_scrapeconfig.scrapeconfig", "instance_id",
						"data.stackit_observability_scrapeconfig.scrapeconfig", "instance_id",
					),
					resource.TestCheckResourceAttrPair(
						"stackit_observability_scrapeconfig.scrapeconfig", "name",
						"data.stackit_observability_scrapeconfig.scrapeconfig", "name",
					),
					resource.TestCheckResourceAttr("data.stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("data.stackit_observability_scrapeconfig.scrapeconfig", "targets.0.urls.#", "2"),
					resource.TestCheckResourceAttr("data.stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("data.stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("data.stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("data.stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", scrapeConfigResource["saml2_enable_url_parameters"]),
				),
			},
			// Import 1
			{
				ResourceName: "stackit_observability_instance.instance",
				ImportStateIdFunc: func(s *terraform.State) (string, error) {
					r, ok := s.RootModule().Resources["stackit_observability_instance.instance"]
					if !ok {
						return "", fmt.Errorf("couldn't find resource stackit_observability_instance.instance")
					}
					instanceId, ok := r.Primary.Attributes["instance_id"]
					if !ok {
						return "", fmt.Errorf("couldn't find attribute instance_id")
					}

					return fmt.Sprintf("%s,%s", testutil.ProjectId, instanceId), nil
				},
				ImportState:       true,
				ImportStateVerify: true,
			},
			// Import 2
			{
				ResourceName: "stackit_observability_scrapeconfig.scrapeconfig",
				ImportStateIdFunc: func(s *terraform.State) (string, error) {
					r, ok := s.RootModule().Resources["stackit_observability_scrapeconfig.scrapeconfig"]
					if !ok {
						return "", fmt.Errorf("couldn't find resource stackit_observability_scrapeconfig.scrapeconfig")
					}
					instanceId, ok := r.Primary.Attributes["instance_id"]
					if !ok {
						return "", fmt.Errorf("couldn't find attribute instance_id")
					}
					name, ok := r.Primary.Attributes["name"]
					if !ok {
						return "", fmt.Errorf("couldn't find attribute name")
					}
					return fmt.Sprintf("%s,%s,%s", testutil.ProjectId, instanceId, name), nil
				},
				ImportState:       true,
				ImportStateVerify: true,
			},
			// Update
			{
				Config: resourceConfig(
					utils.Ptr(fmt.Sprintf(
						"[%q, %q]",
						instanceResource["acl-0"],
						instanceResource["acl-1-updated"],
					)),
					utils.Ptr(instanceResource["metrics_retention_days"]),
					utils.Ptr(instanceResource["metrics_retention_days_1h_downsampling"]),
					utils.Ptr(instanceResource["metrics_retention_days_5m_downsampling"]),
					buildAlertConfig(buildAlertConfigReceivers(true, false, true), buildAlertConfigRoute(true), buildAlertConfigGlobal(false)),
					fmt.Sprintf("%s-new", instanceResource["name"]),
					instanceResource["new_plan_name"],
					"",
					"true",
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "name", instanceResource["name"]+"-new"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "plan_name", instanceResource["new_plan_name"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.0", instanceResource["acl-0"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.1", instanceResource["acl-1-updated"]),

					// Alert Config
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.0", "alertname"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_interval", "10m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_wait", "1m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.repeat_interval", "1h"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.resolve_timeout", "5m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.opsgenie_api_key", "example-api-key"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.global.opsgenie_api_url", "https://api.eu.opsgenie.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.receiver", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_by.0", "alertname"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_interval", "10m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.group_wait", "1m"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.repeat_interval", "1h"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.0.match.severity", "critical"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.0.receiver", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.1.match.severity", "warning"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.route.routes.1.receiver", "WebhookReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.#", "2"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.name", "OpsGenieReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.0.tags", "iam,observability-alert"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.0.opsgenie_configs.0.api_key",
						"example-api-key"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.name", "WebhookReceiverInfo"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.webhooks_configs.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.webhooks_configs.0.url", "https://example.com"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "alert_config.receivers.1.webhooks_configs.0.ms_teams", "true"),

					// Scrape Config
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "targets.#", "0"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.%", "1"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", "true"),

					// Credentials
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "username"),
					resource.TestCheckResourceAttrSet("stackit_observability_credential.credential", "password"),
				),
			},
			// Update and remove saml2 attribute
			{
				Config: fmt.Sprintf(`
				%s

				resource "stackit_observability_instance" "instance" {
					project_id = "%s"
					name      = "%s"
					plan_name = "%s"
				}

				resource "stackit_observability_scrapeconfig" "scrapeconfig" {
					project_id = stackit_observability_instance.instance.project_id
					instance_id = stackit_observability_instance.instance.instance_id
				    name = "%s"
				    targets = [%s]
					scrape_interval = "%s"
					sample_limit = %s
					metrics_path = "%s"
					saml2 = {
						enable_url_parameters = false
					}
				}
				`,
					testutil.ObservabilityProviderConfig(),
					instanceResource["project_id"],
					instanceResource["name"],
					instanceResource["new_plan_name"],
					scrapeConfigResource["name"],
					scrapeConfigResource["urls"],
					scrapeConfigResource["scrape_interval"],
					scrapeConfigResource["sample_limit"],
					scrapeConfigResource["metrics_path"],
				),
				Check: resource.ComposeAggregateTestCheckFunc(
					// Instance
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "project_id", instanceResource["project_id"]),
					resource.TestCheckResourceAttrSet("stackit_observability_instance.instance", "instance_id"),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "name", instanceResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "plan_name", instanceResource["new_plan_name"]),

					// ACL
					resource.TestCheckResourceAttr("stackit_observability_instance.instance", "acl.#", "0"),

					// Scrape Config
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "name", scrapeConfigResource["name"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "targets.#", "1"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "metrics_path", scrapeConfigResource["metrics_path"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scheme", scrapeConfigResource["scheme"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "scrape_interval", scrapeConfigResource["scrape_interval"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "sample_limit", scrapeConfigResource["sample_limit"]),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.%", "1"),
					resource.TestCheckResourceAttr("stackit_observability_scrapeconfig.scrapeconfig", "saml2.enable_url_parameters", "false"),
				),
			},

			// Deletion is done by the framework implicitly
		},
	})
}

func testAccCheckObservabilityDestroy(s *terraform.State) error {
	ctx := context.Background()
	var client *observability.APIClient
	var err error
	if testutil.ObservabilityCustomEndpoint == "" {
		client, err = observability.NewAPIClient(
			config.WithRegion("eu01"),
		)
	} else {
		client, err = observability.NewAPIClient(
			config.WithEndpoint(testutil.ObservabilityCustomEndpoint),
		)
	}
	if err != nil {
		return fmt.Errorf("creating client: %w", err)
	}

	instancesToDestroy := []string{}
	for _, rs := range s.RootModule().Resources {
		if rs.Type != "stackit_observability_instance" {
			continue
		}
		// instance terraform ID: = "[project_id],[instance_id],[name]"
		instanceId := strings.Split(rs.Primary.ID, core.Separator)[1]
		instancesToDestroy = append(instancesToDestroy, instanceId)
	}

	instancesResp, err := client.ListInstances(ctx, testutil.ProjectId).Execute()
	if err != nil {
		return fmt.Errorf("getting instancesResp: %w", err)
	}

	instances := *instancesResp.Instances
	for i := range instances {
		if utils.Contains(instancesToDestroy, *instances[i].Id) {
			if *instances[i].Status != wait.DeleteSuccess {
				_, err := client.DeleteInstanceExecute(ctx, testutil.ProjectId, *instances[i].Id)
				if err != nil {
					return fmt.Errorf("destroying instance %s during CheckDestroy: %w", *instances[i].Id, err)
				}
				_, err = wait.DeleteInstanceWaitHandler(ctx, client, testutil.ProjectId, *instances[i].Id).WaitWithContext(ctx)
				if err != nil {
					return fmt.Errorf("destroying instance %s during CheckDestroy: waiting for deletion %w", *instances[i].Id, err)
				}
			}
		}
	}
	return nil
}