[COR-1213] Use set custom validator to ignore ordering for request co…

…nfigurations (#78)

* new autogen

* Remove spurious req config changes, update Terraform Version

* Unit test for auto approval and no reviewer stages

* docs autogen

* Update Changelog

* Remove old terraform sections added by remote

* speakeasy autogen

* acctests: don't use pointer for bearer auth

* overlay: paths not found

* acctests: remove expectnonemptyplan

.github/workflows/test.yml

@@ -22,7 +22,7 @@ jobs:
           cache: true
       - uses: hashicorp/setup-terraform@v2
         with:
-          terraform_version: "1.2.*"
+          terraform_version: "1.9.*"
           terraform_wrapper: false
       - name: Run acceptance tests
         run: make testacc

.gitignore

@@ -11,3 +11,4 @@ dev/
 .idea
 .vscode/launch.json
 .speakeasy/temp
+demo/*

.speakeasy/gen.lock

@@ -3,10 +3,10 @@ id: b5c8bf75-06e1-47c8-b9ae-ce49ba56069d
 management:
   docChecksum: a107ffd47833df714c17fbb8f44eb9c0
   docVersion: "1.0"
-  speakeasyVersion: 1.345.3
-  generationVersion: 2.378.3
-  releaseVersion: 0.23.1
-  configChecksum: b6a0270266465815fae95e0a1038eca3
+  speakeasyVersion: 1.352.0
+  generationVersion: 2.384.4
+  releaseVersion: 0.23.7
+  configChecksum: f6814dfdacb389e0eddca61bb7c19067
   repoURL: https://github.com/opalsecurity/terraform-provider-opal.git
   repoSubDirectory: .
   published: true
@@ -15,7 +15,7 @@ features:
     additionalDependencies: 0.1.0
     additionalProperties: 0.1.2
     constsAndDefaults: 0.1.4
-    core: 3.24.2
+    core: 3.24.6
     deprecations: 2.81.1
     globalSecurity: 2.81.6
     globalServerURLs: 2.82.1
@@ -231,7 +231,6 @@ generatedFiles:
   - internal/sdk/.gitignore
   - internal/sdk/models/operations/options.go
   - internal/sdk/.gitattributes
-  - internal/sdk/internal/hooks/registration.go
   - internal/sdk/internal/hooks/hooks.go
   - examples/README.md
   - go.mod

.speakeasy/workflow.lock

@@ -1,17 +1,17 @@
-speakeasyVersion: 1.345.3
+speakeasyVersion: 1.352.0
 sources:
     opal-terraform-provider:
         sourceNamespace: opal-terraform-provider
-        sourceRevisionDigest: sha256:fe19f5356675f1f897227b4f8ab1411ecc32b41f2d4d0e676d9c79a4afd87812
-        sourceBlobDigest: sha256:66b70d74e51f3898206042823c9b7a5feb55bd42f22f6a9d94c7856d6f8c8f55
+        sourceRevisionDigest: sha256:5de9ff927b6e35695aff3f63995be2b1bac285ace66b939fdc5944fa30de7b43
+        sourceBlobDigest: sha256:86b9ddd85104869419ff2b39c734475e8343b5faea5af83f20ccc4a5c482876c
         tags:
             - latest
 targets:
     terraform:
         source: opal-terraform-provider
         sourceNamespace: opal-terraform-provider
-        sourceRevisionDigest: sha256:fe19f5356675f1f897227b4f8ab1411ecc32b41f2d4d0e676d9c79a4afd87812
-        sourceBlobDigest: sha256:66b70d74e51f3898206042823c9b7a5feb55bd42f22f6a9d94c7856d6f8c8f55
+        sourceRevisionDigest: sha256:5de9ff927b6e35695aff3f63995be2b1bac285ace66b939fdc5944fa30de7b43
+        sourceBlobDigest: sha256:86b9ddd85104869419ff2b39c734475e8343b5faea5af83f20ccc4a5c482876c
         outLocation: .
 workflow:
     workflowVersion: 1.0.0

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## v3.0.3
+- Fix various bugs in request configuration validation leading to spurious changes and errors
+
 ## v3.0.2
 - No longer need to explicitly pass the auth token to the Opal provider. The provider will look for the OPAL_AUTH_TOKEN envar and use it if set.
 - 404s on refreshing state for Terrafpr, resources will result in the resource being recreated on a subsequent apply rather than erroring.

docs/data-sources/app.md

@@ -31,5 +31,3 @@ data "opal_app" "my_app" {
 - `description` (String) A description of the app.
 - `name` (String) The name of the app.
 - `type` (String) The type of an app.
-
-

docs/data-sources/apps.md

@@ -43,5 +43,3 @@ Read-Only:
 - `id` (String) The ID of the app.
 - `name` (String) The name of the app.
 - `type` (String) The type of an app.
-
-

docs/data-sources/configuration_template_list.md

@@ -59,5 +59,3 @@ Read-Only:
 
 - `visibility` (String) The visibility level of the entity. must be one of ["GLOBAL", "LIMITED"]
 - `visibility_group_ids` (Set of String)
-
-

docs/data-sources/events.md

@@ -68,5 +68,3 @@ Read-Only:
 
 - `additional_properties` (String) Parsed as JSON.
 - `sub_event_type` (String) The subevent type.
-
-

docs/data-sources/group.md

@@ -196,5 +196,3 @@ Read-Only:
 - `owner_ids` (Set of String)
 - `require_admin_approval` (Boolean) Whether this reviewer stage should require admin approval.
 - `require_manager_approval` (Boolean) Whether this reviewer stage should require manager approval.
-
-

docs/data-sources/group_list.md

@@ -177,5 +177,3 @@ Read-Only:
 - `owner_ids` (Set of String)
 - `require_admin_approval` (Boolean) Whether this reviewer stage should require admin approval.
 - `require_manager_approval` (Boolean) Whether this reviewer stage should require manager approval.
-
-

docs/data-sources/group_resource_list.md

@@ -51,5 +51,3 @@ Read-Only:
 
 - `access_level_name` (String) The human-readable name of the access level.
 - `access_level_remote_id` (String) The machine-readable identifier of the access level.
-
-

docs/data-sources/group_reviewers_stages_list.md

@@ -38,5 +38,3 @@ Read-Only:
 - `owner_ids` (Set of String)
 - `require_admin_approval` (Boolean) Whether this reviewer stage should require admin approval.
 - `require_manager_approval` (Boolean) Whether this reviewer stage should require manager approval.
-
-

docs/data-sources/group_tags.md

@@ -40,5 +40,3 @@ Read-Only:
 - `updated_at` (String) The date the tag was last updated.
 - `user_creator_id` (String) The ID of the user that created the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/group_users.md

@@ -54,5 +54,3 @@ Read-Only:
 
 - `access_level_name` (String) The human-readable name of the access level.
 - `access_level_remote_id` (String) The machine-readable identifier of the access level.
-
-

docs/data-sources/message_channel.md

@@ -31,5 +31,3 @@ data "opal_message_channel" "my_messagechannel" {
 - `name` (String) The name of the message channel.
 - `remote_id` (String) The remote ID of the message channel
 - `third_party_provider` (String) The third party provider of the message channel. must be one of ["SLACK"]
-
-

docs/data-sources/message_channel_list.md

@@ -34,5 +34,3 @@ Read-Only:
 - `name` (String) The name of the message channel.
 - `remote_id` (String) The remote ID of the message channel
 - `third_party_provider` (String) The third party provider of the message channel. must be one of ["SLACK"]
-
-

docs/data-sources/on_call_schedule.md

@@ -30,5 +30,3 @@ data "opal_on_call_schedule" "my_oncallschedule" {
 - `name` (String) The name of the on call schedule.
 - `remote_id` (String) The remote ID of the on call schedule
 - `third_party_provider` (String) The third party provider of the on call schedule. must be one of ["OPSGENIE", "PAGER_DUTY"]
-
-

docs/data-sources/on_call_schedule_list.md

@@ -33,5 +33,3 @@ Read-Only:
 - `name` (String) The name of the on call schedule.
 - `remote_id` (String) The remote ID of the on call schedule
 - `third_party_provider` (String) The third party provider of the on call schedule. must be one of ["OPSGENIE", "PAGER_DUTY"]
-
-

docs/data-sources/owner.md

@@ -32,5 +32,3 @@ data "opal_owner" "my_owner" {
 - `name` (String) The name of the owner.
 - `reviewer_message_channel_id` (String)
 - `source_group_id` (String)
-
-

docs/data-sources/owner_from_name.md

@@ -33,5 +33,3 @@ data "opal_owner_from_name" "my_ownerfromname" {
 - `name` (String) The name of the owner.
 - `reviewer_message_channel_id` (String)
 - `source_group_id` (String)
-
-

docs/data-sources/owners.md

@@ -46,5 +46,3 @@ Read-Only:
 - `name` (String) The name of the owner.
 - `reviewer_message_channel_id` (String)
 - `source_group_id` (String)
-
-

docs/data-sources/requests.md

@@ -85,5 +85,3 @@ Read-Only:
 - `group_id` (String) The ID of the group requested.
 - `name` (String) The name of the target.
 - `resource_id` (String) The ID of the resource requested.
-
-

docs/data-sources/resource.md

@@ -332,5 +332,3 @@ Read-Only:
 - `enabled_on_revocation` (Boolean)
 - `ticket_project_id` (String)
 - `ticket_provider` (String) The third party ticketing platform provider. must be one of ["JIRA", "LINEAR", "SERVICE_NOW"]
-
-

docs/data-sources/resource_message_channel_list.md

@@ -39,5 +39,3 @@ Read-Only:
 - `name` (String) The name of the message channel.
 - `remote_id` (String) The remote ID of the message channel
 - `third_party_provider` (String) The third party provider of the message channel. must be one of ["SLACK"]
-
-

docs/data-sources/resource_reviewers_list.md

@@ -28,5 +28,3 @@ data "opal_resource_reviewers_list" "my_resourcereviewerslist" {
 ### Read-Only
 
 - `data` (List of String) The IDs of owners that are reviewers for this resource.
-
-

docs/data-sources/resource_tags.md

@@ -40,5 +40,3 @@ Read-Only:
 - `updated_at` (String) The date the tag was last updated.
 - `user_creator_id` (String) The ID of the user that created the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/resource_visibility.md

@@ -29,5 +29,3 @@ data "opal_resource_visibility" "my_resourcevisibility" {
 
 - `visibility` (String) The visibility level of the entity. must be one of ["GLOBAL", "LIMITED"]
 - `visibility_group_ids` (Set of String)
-
-

docs/data-sources/resources_access_status.md

@@ -55,5 +55,3 @@ Read-Only:
 
 - `access_level_name` (String) The human-readable name of the access level.
 - `access_level_remote_id` (String) The machine-readable identifier of the access level.
-
-

docs/data-sources/resources_list.md

@@ -354,5 +354,3 @@ Read-Only:
 - `enabled_on_revocation` (Boolean)
 - `ticket_project_id` (String)
 - `ticket_provider` (String) The third party ticketing platform provider. must be one of ["JIRA", "LINEAR", "SERVICE_NOW"]
-
-

docs/data-sources/resources_users_list.md

@@ -61,5 +61,3 @@ Read-Only:
 
 - `access_level_name` (String) The human-readable name of the access level.
 - `access_level_remote_id` (String) The machine-readable identifier of the access level.
-
-

docs/data-sources/sessions.md

@@ -60,5 +60,3 @@ Read-Only:
 
 - `access_level_name` (String) The human-readable name of the access level.
 - `access_level_remote_id` (String) The machine-readable identifier of the access level.
-
-

docs/data-sources/tag.md

@@ -32,5 +32,3 @@ data "opal_tag" "my_tag" {
 - `updated_at` (String) The date the tag was last updated.
 - `user_creator_id` (String) The ID of the user that created the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/tags_list.md

@@ -44,5 +44,3 @@ Read-Only:
 - `updated_at` (String) The date the tag was last updated.
 - `user_creator_id` (String) The ID of the user that created the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/uar.md

@@ -59,5 +59,3 @@ Read-Only:
 
 - `key` (String) The key of the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/uars_list.md

@@ -71,5 +71,3 @@ Read-Only:
 
 - `key` (String) The key of the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/user.md

@@ -34,5 +34,3 @@ data "opal_user" "my_user" {
 - `last_name` (String) The last name of the user.
 - `name` (String) The full name of the user.
 - `position` (String) The user's position.
-
-

docs/data-sources/user_tags.md

@@ -40,5 +40,3 @@ Read-Only:
 - `updated_at` (String) The date the tag was last updated.
 - `user_creator_id` (String) The ID of the user that created the tag.
 - `value` (String) The value of the tag.
-
-

docs/data-sources/users.md

@@ -45,5 +45,3 @@ Read-Only:
 - `last_name` (String) The last name of the user.
 - `name` (String) The full name of the user.
 - `position` (String) The user's position.
-
-

docs/index.md

@@ -17,7 +17,7 @@ terraform {
   required_providers {
     opal = {
       source  = "opalsecurity/opal"
-      version = "0.23.1"
+      version = "0.23.7"
     }
   }
 }
@@ -30,7 +30,10 @@ provider "opal" {
 <!-- schema generated by tfplugindocs -->
 ## Schema
 
-### Optional
+### Required
 
 - `bearer_auth` (String, Sensitive)
+
+### Optional
+
 - `server_url` (String) Server URL (defaults to https://api.opal.dev/v1)

docs/resources/configuration_template.md

@@ -145,5 +145,3 @@ Optional:
 - `enabled_on_revocation` (Boolean) Not Null
 - `ticket_project_id` (String)
 - `ticket_provider` (String) The third party ticketing platform provider. must be one of ["JIRA", "LINEAR", "SERVICE_NOW"]
-
-

docs/resources/group_tag.md

@@ -26,5 +26,3 @@ resource "opal_group_tag" "my_grouptag" {
 
 - `group_id` (String) The ID of the group to apply the tag to. Requires replacement if changed.
 - `tag_id` (String) The ID of the tag to apply. Requires replacement if changed.
-
-

docs/resources/group_user.md

@@ -54,5 +54,3 @@ Read-Only:
 
 - `access_level_name` (String) The human-readable name of the access level.
 - `access_level_remote_id` (String) The machine-readable identifier of the access level.
-
-

docs/resources/resource_tag.md

@@ -26,5 +26,3 @@ resource "opal_resource_tag" "my_resourcetag" {
 
 - `resource_id` (String) The ID of the resource to apply the tag to. Requires replacement if changed.
 - `tag_id` (String) The ID of the tag to apply. Requires replacement if changed.
-
-

docs/resources/tag_user.md

@@ -26,5 +26,3 @@ resource "opal_tag_user" "my_taguser" {
 
 - `tag_id` (String) The ID of the tag to apply. Requires replacement if changed.
 - `user_id` (String) The ID of the user to apply the tag to. Requires replacement if changed.
-
-

examples/provider/provider.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     opal = {
       source  = "opalsecurity/opal"
-      version = "0.23.1"
+      version = "0.23.7"
     }
   }
 }

gen.yaml

@@ -11,7 +11,7 @@ generation:
     oAuth2ClientCredentialsEnabled: false
   flattenGlobalSecurity: true
 terraform:
-  version: 0.23.1
+  version: 0.23.7
   additionalDataSources: []
   additionalDependencies: {}
   additionalResources: []