New Resource: wiz_report_graph_query

.github/workflows/pull.yml

@@ -93,6 +93,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
       - name: Check for CODEOWNERS file
         uses: andstor/file-existence-action@v2
         id: check_codeowners_1

docs/resources/report_graph_query.md

@@ -0,0 +1,78 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "wiz_report_graph_query Resource - terraform-provider-wiz"
+subcategory: ""
+description: |-
+  TBD.
+---
+
+# wiz_report_graph_query (Resource)
+
+TBD.
+
+## Example Usage
+
+```terraform
+# A simple example
+resource "wiz_report_graph_query" "foo" {
+  name       = "foo"
+  project_id = "2c38b8fa-c315-57ea-9de4-e3a19592d796"
+  query      = <<EOF
+{
+  "select": true,
+  "type": [
+    "CONTAINER_IMAGE"
+  ],
+  "where": {
+    "name": {
+      "CONTAINS": [
+        "foo"
+      ]
+    }
+  }
+}
+EOF
+}
+
+# Scheduling enabled (both run_interval_hours and run_starts_at must be set)
+resource "wiz_report_graph_query" "foo" {
+  name               = "foo"
+  project_id         = "2c38b8fa-c315-57ea-9de4-e3a19592d796"
+  run_interval_hours = 24
+  run_starts_at      = "2023-12-06 16:30:00 +0000 UTC"
+  query              = <<EOF
+{
+  "select": true,
+  "type": [
+    "CONTAINER_IMAGE"
+  ],
+  "where": {
+    "name": {
+      "CONTAINS": [
+        "foo"
+      ]
+    }
+  }
+}
+EOF
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `name` (String) Name of the Report.
+- `query` (String) The query that the report will run. Required by the GRAPH_QUERY report type.
+
+### Optional
+
+- `project_id` (String) The ID of the project that this report belongs to (changing this requires re-creatting the report).
+    - Defaults to `*`.
+- `run_interval_hours` (Number) Run interval for scheduled reports (in hours).
+- `run_starts_at` (String) String representing the time and date when the scheduling should start (required when run_interval_hours is set). Must be in the following format: 2006-01-02 15:04:05 +0000 UTC. Also, Wiz will always round this down by the hour.
+
+### Read-Only
+
+- `id` (String) The ID of this resource.

examples/resources/wiz_report_graph_query/resource.tf

@@ -0,0 +1,43 @@
+# A simple example
+resource "wiz_report_graph_query" "foo" {
+  name       = "foo"
+  project_id = "2c38b8fa-c315-57ea-9de4-e3a19592d796"
+  query      = <<EOF
+{
+  "select": true,
+  "type": [
+    "CONTAINER_IMAGE"
+  ],
+  "where": {
+    "name": {
+      "CONTAINS": [
+        "foo"
+      ]
+    }
+  }
+}
+EOF
+}
+
+# Scheduling enabled (both run_interval_hours and run_starts_at must be set)
+resource "wiz_report_graph_query" "foo" {
+  name               = "foo"
+  project_id         = "2c38b8fa-c315-57ea-9de4-e3a19592d796"
+  run_interval_hours = 24
+  run_starts_at      = "2023-12-06 16:30:00 +0000 UTC"
+  query              = <<EOF
+{
+  "select": true,
+  "type": [
+    "CONTAINER_IMAGE"
+  ],
+  "where": {
+    "name": {
+      "CONTAINS": [
+        "foo"
+      ]
+    }
+  }
+}
+EOF
+}

internal/acceptance/common.go

@@ -21,6 +21,8 @@ const (
 	TcSubscriptionResourceGroups TestCase = "SUBSCRIPTION_RESOURCE_GROUPS"
 	// TcProject test case
 	TcProject TestCase = "PROJECT"
+	// TcReportGraphQuery test case
+	TcReportGraphQuery TestCase = "REPORT_GRAPH_QUERY"
 	// TcCloudConfigRule test case
 	TcCloudConfigRule TestCase = "CLOUD_CONFIG_RULE"
 )

internal/acceptance/provider_test.go

@@ -45,6 +45,8 @@ func testAccPreCheck(t *testing.T, tc TestCase) {
 		envVars = append(commonEnvVars, "WIZ_SUBSCRIPTION_ID")
 	case TcCloudConfigRule:
 		envVars = append(commonEnvVars, "WIZ_SUBSCRIPTION_ID")
+	case TcReportGraphQuery:
+		envVars = append(commonEnvVars, "WIZ_PROJECT_ID")
 	default:
 		t.Fatalf("unknown testCase: %s", tc)
 	}

internal/acceptance/resource_report_graph_query_test.go

@@ -0,0 +1,64 @@
+package acceptance
+
+import (
+	"fmt"
+	"os"
+	"testing"
+
+	"github.com/hashicorp/terraform-plugin-testing/helper/acctest"
+	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
+)
+
+func TestAccResourceWizReportGraphQuery_basic(t *testing.T) {
+	rName := acctest.RandomWithPrefix(ResourcePrefix)
+	projectID := os.Getenv("WIZ_PROJECT_ID")
+
+	resource.UnitTest(t, resource.TestCase{
+		PreCheck:          func() { testAccPreCheck(t, TestCase(TcReportGraphQuery)) },
+		ProviderFactories: providerFactories,
+		Steps: []resource.TestStep{
+			{
+				Config: testResourceWizReportGraphQueryBasic(rName, projectID),
+				Check: resource.ComposeTestCheckFunc(
+					resource.TestCheckResourceAttr(
+						"wiz_report_graph_query.foo",
+						"name",
+						rName,
+					),
+					resource.TestCheckResourceAttr(
+						"wiz_report_graph_query.foo",
+						"project_id",
+						projectID,
+					),
+					resource.TestCheckResourceAttr(
+						"wiz_report_graph_query.foo",
+						"query",
+						"{\"select\": true, \"type\": [\"CONTAINER_IMAGE\"], \"where\": {\"name\": {\"CONTAINS\": [\"foo\"]}}}",
+					),
+					resource.TestCheckResourceAttr(
+						"wiz_report_graph_query.foo",
+						"run_interval_hours",
+						"48",
+					),
+					resource.TestCheckResourceAttr(
+						"wiz_report_graph_query.foo",
+						"run_starts_at",
+						"2023-12-06 16:00:00 +0000 UTC",
+					),
+				),
+			},
+		},
+	})
+}
+
+func testResourceWizReportGraphQueryBasic(rName, projectID string) string {
+	return fmt.Sprintf(`
+resource "wiz_report_graph_query" "foo" {
+  name = "%s"
+  project_id = "%s"
+  run_interval_hours = 48
+  run_starts_at = "2023-12-06 16:00:00 +0000 UTC"
+  query = "{\"select\": true, \"type\": [\"CONTAINER_IMAGE\"], \"where\": {\"name\": {\"CONTAINS\": [\"foo\"]}}}"
+}
+`, rName, projectID)
+}

internal/provider/provider.go

@@ -274,6 +274,7 @@ yLyKQXhw2W2Xs0qLeC1etA+jTGDK4UfLeC0SF7FSi8o5LL21L8IzApar2pR/
 				"wiz_integration_aws_sns":                      resourceWizIntegrationAwsSNS(),
 				"wiz_integration_servicenow":                   resourceWizIntegrationServiceNow(),
 				"wiz_integration_jira":                         resourceWizIntegrationJira(),
+				"wiz_report_graph_query":                       resourceWizReportGraphQuery(),
 				"wiz_project":                                  resourceWizProject(),
 				"wiz_saml_idp":                                 resourceWizSAMLIdP(),
 				"wiz_security_framework":                       resourceWizSecurityFramework(),

internal/provider/resource_report.go

@@ -0,0 +1,66 @@
+package provider
+
+import (
+	"context"
+
+	"github.com/hashicorp/terraform-plugin-log/tflog"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+
+	"wiz.io/hashicorp/terraform-provider-wiz/internal/client"
+	"wiz.io/hashicorp/terraform-provider-wiz/internal/wiz"
+)
+
+// CreateReport struct
+type CreateReport struct {
+	CreateReport wiz.CreateReportPayload `json:"createReport"`
+}
+
+// UpdateReport struct
+type UpdateReport struct {
+	UpdateReport wiz.Report `json:"updateReport"`
+}
+
+// DeleteReport struct
+type DeleteReport struct {
+	DeleteReport wiz.DeleteReportPayload `json:"deleteReport"`
+}
+
+// ReadReportPayload struct -- updates
+type ReadReportPayload struct {
+	Report wiz.Report `json:"report"`
+}
+
+func resourceWizReportDelete(ctx context.Context, d *schema.ResourceData, m interface{}) (diags diag.Diagnostics) {
+	tflog.Info(ctx, "resourceWizReportDelete called...")
+
+	// check the id
+	if d.Id() == "" {
+		return nil
+	}
+
+	// define the graphql query
+	query := `mutation DeleteReport (
+	    $input: DeleteReportInput!
+	) {
+	    deleteReport(
+		input: $input
+	    ) {
+		_stub
+	    }
+	}`
+
+	// populate the graphql variables
+	vars := &wiz.DeleteReportInput{}
+	vars.ID = d.Id()
+
+	// process the request
+	data := &UpdateReport{}
+	requestDiags := client.ProcessRequest(ctx, m, vars, data, query, "report", "delete")
+	diags = append(diags, requestDiags...)
+	if len(diags) > 0 {
+		return diags
+	}
+
+	return diags
+}