Add support for Cloud Asset feeds

products/cloudasset/api.yaml

@@ -0,0 +1,252 @@
+# Copyright 2019 Google Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+--- !ruby/object:Api::Product
+name: CloudAsset
+display_name: Cloud Asset Inventory
+versions:
+  - !ruby/object:Api::Product::Version
+    name: ga
+    base_url: https://cloudasset.googleapis.com/v1/
+scopes:
+  - https://www.googleapis.com/auth/cloud-platform
+apis_required:
+  - !ruby/object:Api::Product::ApiReference
+    name: Cloud Asset API
+    url: https://console.cloud.google.com/apis/library/cloudasset.googleapis.com/
+objects:
+  - !ruby/object:Api::Resource
+    name: ProjectFeed
+    base_url: projects/{{project}}/feeds
+    create_url: projects/{{project}}/feeds?feedId={{feed_id}}
+    self_link: "{{name}}"
+    update_verb: :PATCH
+    update_mask: true
+    collection_url_key: 'feeds'
+    description: |
+      Describes a Cloud Asset Inventory feed used to to listen to asset updates.
+    references: !ruby/object:Api::Resource::ReferenceLinks
+      guides:
+        'Official Documentation':
+          'https://cloud.google.com/asset-inventory/docs'
+      api: 'https://cloud.google.com/asset-inventory/docs/reference/rest/'
+    properties:
+      - !ruby/object:Api::Type::String
+        name: billing_project
+        url_param_only: true
+        input: true
+        description: |
+          The project whose identity will be used when sending messages to the destination pubsub topic.
+      - !ruby/object:Api::Type::String
+        name: name
+        output: true
+        description: |
+          The format will be projects/{projectNumber}/feeds/{client-assigned_feed_identifier}.
+      - !ruby/object:Api::Type::String
+        name: feedId
+        description: |
+          This is the client-assigned asset feed identifier and it needs to be unique under a specific parent.
+        required: true
+        input: true
+        url_param_only: true
+      - !ruby/object:Api::Type::Array
+        name: assetNames
+        item_type: Api::Type::String
+        description: |
+          A list of the full names of the assets to receive updates. You must specify either or both of 
+          assetNames and assetTypes. Only asset updates matching specified assetNames and assetTypes are
+          exported to the feed. For example: //compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1.
+          See https://cloud.google.com/apis/design/resourceNames#fullResourceName for more info.
+      - !ruby/object:Api::Type::Array
+        name: assetTypes
+        item_type: Api::Type::String
+        description: |
+          A list of types of the assets to receive updates. You must specify either or both of assetNames
+          and assetTypes. Only asset updates matching specified assetNames and assetTypes are exported to
+          the feed. For example: "compute.googleapis.com/Disk"
+          See https://cloud.google.com/asset-inventory/docs/supported-asset-types for a list of all
+          supported asset types.
+      - !ruby/object:Api::Type::String
+        name: contentType
+        description: |
+          Asset content type. If not specified, no content but the asset name and type will be returned.
+      - !ruby/object:Api::Type::NestedObject
+        name: feedOutputConfig
+        required: true
+        description: |
+          Output configuration for asset feed destination.
+        properties:
+          - !ruby/object:Api::Type::NestedObject
+            name: pubsubDestination
+            description: |
+              Destination on Cloud Pubsub.
+            properties:
+              - !ruby/object:Api::Type::String
+                name: topic
+                description: |
+                  Destination on Cloud Pubsub topic.
+  - !ruby/object:Api::Resource
+    name: FolderFeed
+    base_url: "{{folder}}/feeds"
+    create_url: "{{folder}}/feeds?feedId={{feed_id}}"
+    self_link: "{{name}}"
+    update_verb: :PATCH
+    update_mask: true
+    collection_url_key: 'feeds'
+    description: |
+      Describes a Cloud Asset Inventory feed used to to listen to asset updates.
+    references: !ruby/object:Api::Resource::ReferenceLinks
+      guides:
+        'Official Documentation':
+          'https://cloud.google.com/asset-inventory/docs'
+      api: 'https://cloud.google.com/asset-inventory/docs/reference/rest/'
+    properties:
+      - !ruby/object:Api::Type::String
+        name: folder
+        required: true
+        input: true
+        url_param_only: true
+        description: |
+          The folder this feed should be created in.
+      - !ruby/object:Api::Type::String
+        name: project
+        required: true
+        input: true
+        url_param_only: true
+        description: |
+          The project whose identity will be used when sending messages to the destination pubsub topic.
+      - !ruby/object:Api::Type::String
+        name: name
+        output: true
+        description: |
+          The format will be folders/{folder_number}/feeds/{client-assigned_feed_identifier}.
+      - !ruby/object:Api::Type::String
+        name: feedId
+        description: |
+          This is the client-assigned asset feed identifier and it needs to be unique under a specific parent.
+        required: true
+        input: true
+        url_param_only: true
+      - !ruby/object:Api::Type::Array
+        name: assetNames
+        item_type: Api::Type::String
+        description: |
+          A list of the full names of the assets to receive updates. You must specify either or both of 
+          assetNames and assetTypes. Only asset updates matching specified assetNames and assetTypes are
+          exported to the feed. For example: //compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1.
+          See https://cloud.google.com/apis/design/resourceNames#fullResourceName for more info.
+      - !ruby/object:Api::Type::Array
+        name: assetTypes
+        item_type: Api::Type::String
+        description: |
+          A list of types of the assets to receive updates. You must specify either or both of assetNames
+          and assetTypes. Only asset updates matching specified assetNames and assetTypes are exported to
+          the feed. For example: "compute.googleapis.com/Disk"
+          See https://cloud.google.com/asset-inventory/docs/supported-asset-types for a list of all
+          supported asset types.
+      - !ruby/object:Api::Type::String
+        name: contentType
+        description: |
+          Asset content type. If not specified, no content but the asset name and type will be returned.
+      - !ruby/object:Api::Type::NestedObject
+        name: feedOutputConfig
+        required: true
+        description: |
+          Output configuration for asset feed destination.
+        properties:
+          - !ruby/object:Api::Type::NestedObject
+            name: pubsubDestination
+            description: |
+              Destination on Cloud Pubsub.
+            properties:
+              - !ruby/object:Api::Type::String
+                name: topic
+                description: |
+                  Destination on Cloud Pubsub topic.
+  - !ruby/object:Api::Resource
+    name: OrganizationFeed
+    base_url: "organizations/{{org_id}}/feeds"
+    create_url: "organizations/{{org_id}}/feeds?feedId={{feed_id}}"
+    self_link: "{{name}}"
+    update_verb: :PATCH
+    update_mask: true
+    collection_url_key: 'feeds'
+    description: |
+      Describes a Cloud Asset Inventory feed used to to listen to asset updates.
+    references: !ruby/object:Api::Resource::ReferenceLinks
+      guides:
+        'Official Documentation':
+          'https://cloud.google.com/asset-inventory/docs'
+      api: 'https://cloud.google.com/asset-inventory/docs/reference/rest/'
+    properties:
+      - !ruby/object:Api::Type::String
+        name: org_id
+        required: true
+        input: true
+        url_param_only: true
+        description: |
+          The organization this feed should be created in.
+      - !ruby/object:Api::Type::String
+        name: project
+        required: true
+        input: true
+        url_param_only: true
+        description: |
+          The project whose identity will be used when sending messages to the destination pubsub topic.
+      - !ruby/object:Api::Type::String
+        name: name
+        output: true
+        description: |
+          The format will be organizations/{organization_number}/feeds/{client-assigned_feed_identifier}.
+      - !ruby/object:Api::Type::String
+        name: feedId
+        description: |
+          This is the client-assigned asset feed identifier and it needs to be unique under a specific parent.
+        required: true
+        input: true
+        url_param_only: true
+      - !ruby/object:Api::Type::Array
+        name: assetNames
+        item_type: Api::Type::String
+        description: |
+          A list of the full names of the assets to receive updates. You must specify either or both of 
+          assetNames and assetTypes. Only asset updates matching specified assetNames and assetTypes are
+          exported to the feed. For example: //compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1.
+          See https://cloud.google.com/apis/design/resourceNames#fullResourceName for more info.
+      - !ruby/object:Api::Type::Array
+        name: assetTypes
+        item_type: Api::Type::String
+        description: |
+          A list of types of the assets to receive updates. You must specify either or both of assetNames
+          and assetTypes. Only asset updates matching specified assetNames and assetTypes are exported to
+          the feed. For example: "compute.googleapis.com/Disk"
+          See https://cloud.google.com/asset-inventory/docs/supported-asset-types for a list of all
+          supported asset types.
+      - !ruby/object:Api::Type::String
+        name: contentType
+        description: |
+          Asset content type. If not specified, no content but the asset name and type will be returned.
+      - !ruby/object:Api::Type::NestedObject
+        name: feedOutputConfig
+        required: true
+        description: |
+          Output configuration for asset feed destination.
+        properties:
+          - !ruby/object:Api::Type::NestedObject
+            name: pubsubDestination
+            description: |
+              Destination on Cloud Pubsub.
+            properties:
+              - !ruby/object:Api::Type::String
+                name: topic
+                description: |
+                  Destination on Cloud Pubsub topic.

products/cloudasset/terraform.yaml

@@ -0,0 +1,65 @@
+# Copyright 2019 Google Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+--- !ruby/object:Provider::Terraform::Config
+overrides: !ruby/object:Overrides::ResourceOverrides
+  ProjectFeed: !ruby/object:Overrides::Terraform::ResourceOverride
+    autogen_async: false
+    custom_code: !ruby/object:Provider::Terraform::CustomCode
+      pre_create: templates/terraform/pre_create/cloud_asset_feed.go.erb
+      post_create: templates/terraform/post_create/cloud_asset_feed.go.erb
+      pre_update: templates/terraform/pre_update/cloud_asset_feed.go.erb
+      custom_import: templates/terraform/custom_import/cloud_asset_feed.go.erb
+    examples:
+      - !ruby/object:Provider::Terraform::Examples
+        name: "cloud_asset_project_feed"
+        primary_resource_id: "project_feed"
+        vars:
+          feed_id: "network-updates"
+        test_env_vars:
+          project: :PROJECT_NAME
+  FolderFeed: !ruby/object:Overrides::Terraform::ResourceOverride
+    autogen_async: false
+    supports_indirect_user_project_override: true
+    custom_code: !ruby/object:Provider::Terraform::CustomCode
+      pre_create: templates/terraform/pre_create/cloud_asset_feed.go.erb
+      post_create: templates/terraform/post_create/cloud_asset_feed.go.erb
+      pre_update: templates/terraform/pre_update/cloud_asset_feed.go.erb
+      custom_import: templates/terraform/custom_import/cloud_asset_feed.go.erb
+    examples:
+      - !ruby/object:Provider::Terraform::Examples
+        name: "cloud_asset_folder_feed"
+        primary_resource_id: "folder_feed"
+        vars:
+          feed_id: "network-updates"
+          folder_name: "Networking"
+        test_env_vars:
+          project: :PROJECT_NAME
+          org_id: :ORG_ID
+  OrganizationFeed: !ruby/object:Overrides::Terraform::ResourceOverride
+    autogen_async: false
+    supports_indirect_user_project_override: true
+    custom_code: !ruby/object:Provider::Terraform::CustomCode
+      pre_create: templates/terraform/pre_create/cloud_asset_feed.go.erb
+      post_create: templates/terraform/post_create/cloud_asset_feed.go.erb
+      pre_update: templates/terraform/pre_update/cloud_asset_feed.go.erb
+      custom_import: templates/terraform/custom_import/cloud_asset_feed.go.erb
+    examples:
+      - !ruby/object:Provider::Terraform::Examples
+        name: "cloud_asset_organization_feed"
+        primary_resource_id: "organization_feed"
+        vars:
+          feed_id: "network-updates"
+        test_env_vars:
+          project: :PROJECT_NAME
+          org_id: :ORG_ID

provider/terraform/custom_code.rb

@@ -75,6 +75,9 @@ class CustomCode < Api::Object
       # (e.g. "fooBarDiffSuppress") and regexes that are necessarily
       # exported (e.g. "fooBarValidationRegex").
       attr_reader :constants
+      # This code is run before the Create call happens.  It's placed
+      # in the Create function, just before the Create call is made.
+      attr_reader :pre_create
       # This code is run after the Create call succeeds.  It's placed
       # in the Create function directly without modification.
       attr_reader :post_create
@@ -126,6 +129,7 @@ def validate
         check :update_encoder, type: String
         check :decoder, type: String
         check :constants, type: String
+        check :pre_create, type: String
         check :post_create, type: String
         check :custom_create, type: String
         check :pre_update, type: String

templates/terraform/custom_import/cloud_asset_feed.go.erb

@@ -0,0 +1,4 @@
+if err := d.Set("name", d.Id()); err != nil {
+  return nil, err
+}
+return []*schema.ResourceData{d}, nil

templates/terraform/examples/cloud_asset_folder_feed.tf.erb

@@ -0,0 +1,51 @@
+# Create a feed that sends notifications about network resource updates under a
+# particular folder.
+resource "google_cloud_asset_folder_feed" "<%= ctx[:primary_resource_id] %>" {
+  project  = "<%= ctx[:test_env_vars]["project"] %>"
+  folder           = google_folder.my_folder.name
+  feed_id          = "<%= ctx[:vars]["feed_id"] %>"
+  content_type     = "RESOURCE"
+
+  asset_types = [
+    "compute.googleapis.com/Subnetwork",
+    "compute.googleapis.com/Network",
+  ]
+
+  feed_output_config {
+    pubsub_destination {
+      topic = google_pubsub_topic.feed_output.id
+    }
+  }
+
+  # Wait for the permission to be ready on the destination topic.
+  depends_on = [
+    google_pubsub_topic_iam_member.cloud_asset_writer,
+  ]
+}
+
+# The topic where the resource change notifications will be sent.
+resource "google_pubsub_topic" "feed_output" {
+  project  = "<%= ctx[:test_env_vars]["project"] %>"
+  name     = "<%= ctx[:vars]["feed_id"] %>"
+}
+
+# The folder that will be monitored for resource updates.
+resource "google_folder" "my_folder" {
+  display_name = "<%= ctx[:vars]["folder_name"] %>"
+  parent       = "organizations/<%= ctx[:test_env_vars]["org_id"] %>"
+}
+
+# Find the project number of the project whose identity will be used for sending
+# the asset change notifications.
+data "google_project" "project" {
+  project_id = "<%= ctx[:test_env_vars]["project"] %>"
+}
+
+# Allow the publishing role to the Cloud Asset service account of the project that
+# was used for sending the notifications.
+resource "google_pubsub_topic_iam_member" "cloud_asset_writer" {
+  project = "<%= ctx[:test_env_vars]["project"] %>"
+  topic   = google_pubsub_topic.feed_output.id
+  role    = "roles/pubsub.publisher"
+  member  = "serviceAccount:service-${data.google_project.project.number}@gcp-sa-cloudasset.iam.gserviceaccount.com"
+}