Skip to content

Commit

Permalink
IAP IAM AppEngine Version
Browse files Browse the repository at this point in the history
Signed-off-by: Modular Magician <[email protected]>
  • Loading branch information
slevenick authored and modular-magician committed Sep 27, 2019
1 parent c9bda57 commit a478e03
Show file tree
Hide file tree
Showing 15 changed files with 1,451 additions and 4 deletions.
3 changes: 3 additions & 0 deletions google/iam_binary_authorization_attestor.go
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,9 @@ func BinaryAuthorizationAttestorIamUpdaterProducer(d *schema.ResourceData, confi
return nil, err
}
values["project"] = project
if v, ok := d.GetOk("attestor"); ok {
values["attestor"] = v.(string)
}

// We may have gotten either a long or short name, so attempt to parse long name if possible
m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/attestors/(?P<attestor>[^/]+)", "(?P<project>[^/]+)/(?P<attestor>[^/]+)", "(?P<attestor>[^/]+)"}, d, config, d.Get("attestor").(string))
Expand Down
5 changes: 3 additions & 2 deletions google/iam_cloud_functions_cloud_function.go
Original file line number Diff line number Diff line change
Expand Up @@ -58,12 +58,14 @@ func CloudFunctionsCloudFunctionIamUpdaterProducer(d *schema.ResourceData, confi
return nil, err
}
values["project"] = project

region, err := getRegion(d, config)
if err != nil {
return nil, err
}
values["region"] = region
if v, ok := d.GetOk("cloud_function"); ok {
values["cloud_function"] = v.(string)
}

// We may have gotten either a long or short name, so attempt to parse long name if possible
m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/locations/(?P<region>[^/]+)/functions/(?P<cloud_function>[^/]+)", "(?P<project>[^/]+)/(?P<region>[^/]+)/(?P<cloud_function>[^/]+)", "(?P<region>[^/]+)/(?P<cloud_function>[^/]+)", "(?P<cloud_function>[^/]+)"}, d, config, d.Get("cloud_function").(string))
Expand Down Expand Up @@ -100,7 +102,6 @@ func CloudFunctionsCloudFunctionIdParseFunc(d *schema.ResourceData, config *Conf
return err
}
values["project"] = project

region, err := getRegion(d, config)
if err != nil {
return err
Expand Down
185 changes: 185 additions & 0 deletions google/iam_iap_app_engine_service.go
Original file line number Diff line number Diff line change
@@ -0,0 +1,185 @@
// ----------------------------------------------------------------------------
//
// *** AUTO GENERATED CODE *** AUTO GENERATED CODE ***
//
// ----------------------------------------------------------------------------
//
// This file is automatically generated by Magic Modules and manual
// changes will be clobbered when the file is regenerated.
//
// Please read more about how to change this file in
// .github/CONTRIBUTING.md.
//
// ----------------------------------------------------------------------------
package google

import (
"fmt"

"github.com/hashicorp/errwrap"
"github.com/hashicorp/terraform-plugin-sdk/helper/schema"
"google.golang.org/api/cloudresourcemanager/v1"
)

var IapAppEngineServiceIamSchema = map[string]*schema.Schema{
"project": {
Type: schema.TypeString,
Computed: true,
Optional: true,
ForceNew: true,
},
"app_id": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
},
"service": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
DiffSuppressFunc: compareSelfLinkOrResourceName,
},
}

type IapAppEngineServiceIamUpdater struct {
project string
appId string
service string
d *schema.ResourceData
Config *Config
}

func IapAppEngineServiceIamUpdaterProducer(d *schema.ResourceData, config *Config) (ResourceIamUpdater, error) {
values := make(map[string]string)

project, err := getProject(d, config)
if err != nil {
return nil, err
}
values["project"] = project
if v, ok := d.GetOk("app_id"); ok {
values["appId"] = v.(string)
}

if v, ok := d.GetOk("service"); ok {
values["service"] = v.(string)
}

// We may have gotten either a long or short name, so attempt to parse long name if possible
m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/iap_web/appengine-(?P<appId>[^/]+)/services/(?P<service>[^/]+)", "(?P<project>[^/]+)/(?P<appId>[^/]+)/(?P<service>[^/]+)", "(?P<appId>[^/]+)/(?P<service>[^/]+)", "(?P<service>[^/]+)"}, d, config, d.Get("service").(string))
if err != nil {
return nil, err
}

for k, v := range m {
values[k] = v
}

u := &IapAppEngineServiceIamUpdater{
project: values["project"],
appId: values["appId"],
service: values["service"],
d: d,
Config: config,
}

d.Set("project", u.project)
d.Set("app_id", u.appId)
d.Set("service", u.GetResourceId())

d.SetId(u.GetResourceId())

return u, nil
}

func IapAppEngineServiceIdParseFunc(d *schema.ResourceData, config *Config) error {
values := make(map[string]string)

project, err := getProject(d, config)
if err != nil {
return err
}
values["project"] = project

m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/iap_web/appengine-(?P<appId>[^/]+)/services/(?P<service>[^/]+)", "(?P<project>[^/]+)/(?P<appId>[^/]+)/(?P<service>[^/]+)", "(?P<appId>[^/]+)/(?P<service>[^/]+)", "(?P<service>[^/]+)"}, d, config, d.Id())
if err != nil {
return err
}

for k, v := range m {
values[k] = v
}

u := &IapAppEngineServiceIamUpdater{
project: values["project"],
appId: values["appId"],
service: values["service"],
d: d,
Config: config,
}
d.Set("service", u.GetResourceId())
d.SetId(u.GetResourceId())
return nil
}

func (u *IapAppEngineServiceIamUpdater) GetResourceIamPolicy() (*cloudresourcemanager.Policy, error) {
url := u.qualifyAppEngineServiceUrl("getIamPolicy")

project, err := getProject(u.d, u.Config)
if err != nil {
return nil, err
}

policy, err := sendRequest(u.Config, "POST", project, url, nil)
if err != nil {
return nil, errwrap.Wrapf(fmt.Sprintf("Error retrieving IAM policy for %s: {{err}}", u.DescribeResource()), err)
}

out := &cloudresourcemanager.Policy{}
err = Convert(policy, out)
if err != nil {
return nil, errwrap.Wrapf("Cannot convert a policy to a resource manager policy: {{err}}", err)
}

return out, nil
}

func (u *IapAppEngineServiceIamUpdater) SetResourceIamPolicy(policy *cloudresourcemanager.Policy) error {
json, err := ConvertToMap(policy)
if err != nil {
return err
}

obj := make(map[string]interface{})
obj["policy"] = json

url := u.qualifyAppEngineServiceUrl("setIamPolicy")

project, err := getProject(u.d, u.Config)
if err != nil {
return err
}

_, err = sendRequestWithTimeout(u.Config, "POST", project, url, obj, u.d.Timeout(schema.TimeoutCreate))
if err != nil {
return errwrap.Wrapf(fmt.Sprintf("Error setting IAM policy for %s: {{err}}", u.DescribeResource()), err)
}

return nil
}

func (u *IapAppEngineServiceIamUpdater) qualifyAppEngineServiceUrl(methodIdentifier string) string {
return fmt.Sprintf("https://iap.googleapis.com/v1/%s:%s", fmt.Sprintf("projects/%s/iap_web/appengine-%s/services/%s", u.project, u.appId, u.service), methodIdentifier)
}

func (u *IapAppEngineServiceIamUpdater) GetResourceId() string {
return fmt.Sprintf("projects/%s/iap_web/appengine-%s/services/%s", u.project, u.appId, u.service)
}

func (u *IapAppEngineServiceIamUpdater) GetMutexKey() string {
return fmt.Sprintf("iam-iap-appengineservice-%s", u.GetResourceId())
}

func (u *IapAppEngineServiceIamUpdater) DescribeResource() string {
return fmt.Sprintf("iap appengineservice %q", u.GetResourceId())
}
Loading

0 comments on commit a478e03

Please sign in to comment.