Iap iam rework

Signed-off-by: Modular Magician <magic-modules@google.com>
hashicorp · Aug 16, 2019 · 2ec2bdb · 2ec2bdb
1 parent 28429fc
commit 2ec2bdb
Show file tree

Hide file tree

Showing 25 changed files with 2,233 additions and 45 deletions.
diff --git a/google-beta/config.go b/google-beta/config.go
@@ -84,6 +84,7 @@ type Config struct {
 	FilestoreBasePath            string
 	FirestoreBasePath            string
 	HealthcareBasePath           string
+	IapBasePath                  string
 	KmsBasePath                  string
 	LoggingBasePath              string
 	MonitoringBasePath           string

diff --git a/google-beta/iam_iap_web.go b/google-beta/iam_iap_web.go
@@ -0,0 +1,172 @@
+// ----------------------------------------------------------------------------
+//
+//     ***     AUTO GENERATED CODE    ***    AUTO GENERATED CODE     ***
+//
+// ----------------------------------------------------------------------------
+//
+//     This file is automatically generated by Magic Modules and manual
+//     changes will be clobbered when the file is regenerated.
+//
+//     Please read more about how to change this file in
+//     .github/CONTRIBUTING.md.
+//
+// ----------------------------------------------------------------------------
+
+package google
+
+import (
+	"fmt"
+
+	"github.com/hashicorp/errwrap"
+	"github.com/hashicorp/terraform/helper/schema"
+	"google.golang.org/api/cloudresourcemanager/v1"
+)
+
+var IapWebIamSchema = map[string]*schema.Schema{
+	"project": {
+		Type:             schema.TypeString,
+		Computed:         true,
+		Optional:         true,
+		ForceNew:         true,
+		DiffSuppressFunc: compareSelfLinkOrResourceName,
+	},
+}
+
+type IapWebIamUpdater struct {
+	project string
+	d       *schema.ResourceData
+	Config  *Config
+}
+
+func IapWebIamUpdaterProducer(d *schema.ResourceData, config *Config) (ResourceIamUpdater, error) {
+	values := make(map[string]string)
+
+	project, err := getProject(d, config)
+	if err != nil {
+		return nil, err
+	}
+
+	// While this may be overridden by the "project" value from getImportIdQualifiers below,
+	// setting project here ensures the value is set even if the value set in config is the short
+	// name or otherwise doesn't include the project.
+	values["project"] = project
+
+	// We may have gotten either a long or short name, so attempt to parse long name if possible
+	m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/iap_web", "(?P<project>[^/]+)"}, d, config, d.Get("project").(string))
+
+	if err != nil {
+		return nil, err
+	}
+
+	for k, v := range m {
+		values[k] = v
+	}
+	if _, found := values["project"]; !found {
+		if v, ok := d.GetOkExists("project"); ok {
+			values["project"] = v.(string)
+		}
+	}
+
+	u := &IapWebIamUpdater{
+		project: values["project"],
+		d:       d,
+		Config:  config,
+	}
+
+	d.Set("project", u.project)
+
+	d.SetId(u.GetResourceId())
+
+	return u, nil
+}
+
+func IapWebIdParseFunc(d *schema.ResourceData, config *Config) error {
+	values := make(map[string]string)
+
+	project, err := getProject(d, config)
+	if err != nil {
+		return err
+	}
+
+	values["project"] = project
+
+	m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/iap_web", "(?P<project>[^/]+)"}, d, config, d.Id())
+	if err != nil {
+		return err
+	}
+
+	for k, v := range m {
+		values[k] = v
+	}
+
+	u := &IapWebIamUpdater{
+		project: values["project"],
+		d:       d,
+		Config:  config,
+	}
+	d.Set("project", u.project)
+	d.SetId(u.GetResourceId())
+	return nil
+}
+
+func (u *IapWebIamUpdater) GetResourceIamPolicy() (*cloudresourcemanager.Policy, error) {
+	url := u.qualifyWebUrl("getIamPolicy")
+
+	project, err := getProject(u.d, u.Config)
+	if err != nil {
+		return nil, err
+	}
+
+	policy, err := sendRequest(u.Config, "POST", project, url, nil)
+	if err != nil {
+		return nil, errwrap.Wrapf(fmt.Sprintf("Error retrieving IAM policy for %s: {{err}}", u.DescribeResource()), err)
+	}
+
+	out := &cloudresourcemanager.Policy{}
+	err = Convert(policy, out)
+	if err != nil {
+		return nil, errwrap.Wrapf("Cannot convert a policy to a resource manager policy: {{err}}", err)
+	}
+
+	return out, nil
+}
+
+func (u *IapWebIamUpdater) SetResourceIamPolicy(policy *cloudresourcemanager.Policy) error {
+	json, err := ConvertToMap(policy)
+	if err != nil {
+		return err
+	}
+
+	obj := make(map[string]interface{})
+	obj["policy"] = json
+
+	url := u.qualifyWebUrl("setIamPolicy")
+
+	project, err := getProject(u.d, u.Config)
+	if err != nil {
+		return err
+	}
+
+	_, err = sendRequestWithTimeout(u.Config, "POST", project, url, obj, u.d.Timeout(schema.TimeoutCreate))
+	if err != nil {
+		return errwrap.Wrapf(fmt.Sprintf("Error setting IAM policy for %s: {{err}}", u.DescribeResource()), err)
+	}
+
+	return nil
+}
+
+func (u *IapWebIamUpdater) qualifyWebUrl(methodIdentifier string) string {
+	return fmt.Sprintf("https://iap.googleapis.com/v1/%s:%s", fmt.Sprintf("projects/%s/iap_web", u.project), methodIdentifier)
+}
+
+func (u *IapWebIamUpdater) GetResourceId() string {
+	return fmt.Sprintf("projects/%s/iap_web", u.project)
+}
+
+func (u *IapWebIamUpdater) GetMutexKey() string {
+	return fmt.Sprintf("iam-iap-web-%s", u.GetResourceId())
+}
+
+func (u *IapWebIamUpdater) DescribeResource() string {
+	return fmt.Sprintf("iap web %q", u.GetResourceId())
+}
diff --git a/google-beta/iam_iap_web_backend_service.go b/google-beta/iam_iap_web_backend_service.go
@@ -0,0 +1,186 @@
+// ----------------------------------------------------------------------------
+//
+//     ***     AUTO GENERATED CODE    ***    AUTO GENERATED CODE     ***
+//
+// ----------------------------------------------------------------------------
+//
+//     This file is automatically generated by Magic Modules and manual
+//     changes will be clobbered when the file is regenerated.
+//
+//     Please read more about how to change this file in
+//     .github/CONTRIBUTING.md.
+//
+// ----------------------------------------------------------------------------
+
+package google
+
+import (
+	"fmt"
+
+	"github.com/hashicorp/errwrap"
+	"github.com/hashicorp/terraform/helper/schema"
+	"google.golang.org/api/cloudresourcemanager/v1"
+)
+
+var IapWebBackendServiceIamSchema = map[string]*schema.Schema{
+	"project": {
+		Type:     schema.TypeString,
+		Computed: true,
+		Optional: true,
+		ForceNew: true,
+	},
+	"backend_service_name": {
+		Type:             schema.TypeString,
+		Required:         true,
+		ForceNew:         true,
+		DiffSuppressFunc: compareSelfLinkOrResourceName,
+	},
+}
+
+type IapWebBackendServiceIamUpdater struct {
+	project              string
+	backend_service_name string
+	d                    *schema.ResourceData
+	Config               *Config
+}
+
+func IapWebBackendServiceIamUpdaterProducer(d *schema.ResourceData, config *Config) (ResourceIamUpdater, error) {
+	values := make(map[string]string)
+
+	project, err := getProject(d, config)
+	if err != nil {
+		return nil, err
+	}
+
+	// While this may be overridden by the "project" value from getImportIdQualifiers below,
+	// setting project here ensures the value is set even if the value set in config is the short
+	// name or otherwise doesn't include the project.
+	values["project"] = project
+
+	// We may have gotten either a long or short name, so attempt to parse long name if possible
+	m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/iap_web/compute/services/(?P<backendServiceName>[^/]+)", "(?P<project>[^/]+)/(?P<backendServiceName>[^/]+)", "(?P<backendServiceName>[^/]+)"}, d, config, d.Get("backend_service_name").(string))
+
+	if err != nil {
+		return nil, err
+	}
+
+	for k, v := range m {
+		values[k] = v
+	}
+	if _, found := values["project"]; !found {
+		if v, ok := d.GetOkExists("project"); ok {
+			values["project"] = v.(string)
+		}
+	}
+	if _, found := values["backendServiceName"]; !found {
+		if v, ok := d.GetOkExists("backend_service_name"); ok {
+			values["backendServiceName"] = v.(string)
+		}
+	}
+
+	u := &IapWebBackendServiceIamUpdater{
+		project:              values["project"],
+		backend_service_name: values["backendServiceName"],
+		d:                    d,
+		Config:               config,
+	}
+
+	d.Set("project", u.project)
+	d.Set("backend_service_name", u.GetResourceId())
+
+	d.SetId(u.GetResourceId())
+
+	return u, nil
+}
+
+func IapWebBackendServiceIdParseFunc(d *schema.ResourceData, config *Config) error {
+	values := make(map[string]string)
+
+	project, err := getProject(d, config)
+	if err != nil {
+		return err
+	}
+
+	values["project"] = project
+
+	m, err := getImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/iap_web/compute/services/(?P<backendServiceName>[^/]+)", "(?P<project>[^/]+)/(?P<backendServiceName>[^/]+)", "(?P<backendServiceName>[^/]+)"}, d, config, d.Id())
+	if err != nil {
+		return err
+	}
+
+	for k, v := range m {
+		values[k] = v
+	}
+
+	u := &IapWebBackendServiceIamUpdater{
+		project:              values["project"],
+		backend_service_name: values["backendServiceName"],
+		d:                    d,
+		Config:               config,
+	}
+	d.Set("backend_service_name", u.GetResourceId())
+	d.SetId(u.GetResourceId())
+	return nil
+}
+
+func (u *IapWebBackendServiceIamUpdater) GetResourceIamPolicy() (*cloudresourcemanager.Policy, error) {
+	url := u.qualifyWebBackendServiceUrl("getIamPolicy")
+
+	project, err := getProject(u.d, u.Config)
+	if err != nil {
+		return nil, err
+	}
+
+	policy, err := sendRequest(u.Config, "POST", project, url, nil)
+	if err != nil {
+		return nil, errwrap.Wrapf(fmt.Sprintf("Error retrieving IAM policy for %s: {{err}}", u.DescribeResource()), err)
+	}
+
+	out := &cloudresourcemanager.Policy{}
+	err = Convert(policy, out)
+	if err != nil {
+		return nil, errwrap.Wrapf("Cannot convert a policy to a resource manager policy: {{err}}", err)
+	}
+
+	return out, nil
+}
+
+func (u *IapWebBackendServiceIamUpdater) SetResourceIamPolicy(policy *cloudresourcemanager.Policy) error {
+	json, err := ConvertToMap(policy)
+	if err != nil {
+		return err
+	}
+
+	obj := make(map[string]interface{})
+	obj["policy"] = json
+
+	url := u.qualifyWebBackendServiceUrl("setIamPolicy")
+
+	project, err := getProject(u.d, u.Config)
+	if err != nil {
+		return err
+	}
+
+	_, err = sendRequestWithTimeout(u.Config, "POST", project, url, obj, u.d.Timeout(schema.TimeoutCreate))
+	if err != nil {
+		return errwrap.Wrapf(fmt.Sprintf("Error setting IAM policy for %s: {{err}}", u.DescribeResource()), err)
+	}
+
+	return nil
+}
+
+func (u *IapWebBackendServiceIamUpdater) qualifyWebBackendServiceUrl(methodIdentifier string) string {
+	return fmt.Sprintf("https://iap.googleapis.com/v1/%s:%s", fmt.Sprintf("projects/%s/iap_web/compute/services/%s", u.project, u.backend_service_name), methodIdentifier)
+}
+
+func (u *IapWebBackendServiceIamUpdater) GetResourceId() string {
+	return fmt.Sprintf("projects/%s/iap_web/compute/services/%s", u.project, u.backend_service_name)
+}
+
+func (u *IapWebBackendServiceIamUpdater) GetMutexKey() string {
+	return fmt.Sprintf("iam-iap-webbackendservice-%s", u.GetResourceId())
+}
+
+func (u *IapWebBackendServiceIamUpdater) DescribeResource() string {
+	return fmt.Sprintf("iap webbackendservice %q", u.GetResourceId())
+}