forked from hashicorp/terraform-provider-vault
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add resource for GCP Static Account (hashicorp#1094)
* Refactor some GCP functions out to a separate file * Add GCP Static account resource * Rename Binding type * Add tests * Update * Update prefix Ref hashicorp/vault-plugin-secrets-gcp@8fba665 * Add docs * Apply suggestions from code review Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com> * Rename function * Update vault/resource_gcp_secret_static_account.go Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com> * Add some comments Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com> Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
- Loading branch information
1 parent
1cd05eb
commit 472c2a0
Showing
9 changed files
with
864 additions
and
100 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,99 @@ | ||
| package vault | ||
|
|
||
| import ( | ||
| "bytes" | ||
| "fmt" | ||
| "sort" | ||
|
|
||
| "github.com/hashicorp/terraform-plugin-sdk/helper/hashcode" | ||
| "github.com/hashicorp/terraform-plugin-sdk/helper/schema" | ||
| ) | ||
|
|
||
| /// GCPBinding is used to generate the HCL binding format that GCP Secret Engine Requires | ||
| /// `Resource` is the self-link of a GCP resource | ||
| /// Roles is a list of IAM roles to be assigned to an entity for that resource. | ||
| type GCPBinding struct { | ||
| Resource string | ||
| Roles []string | ||
| } | ||
|
|
||
| func gcpSecretFlattenBinding(v interface{}) interface{} { | ||
| transformed := schema.NewSet(gcpSecretBindingHash, []interface{}{}) | ||
| if v == nil { | ||
| return transformed | ||
| } | ||
|
|
||
| rawBindings := v.((map[string]interface{})) | ||
| for resource, roles := range rawBindings { | ||
| transformed.Add(map[string]interface{}{ | ||
| "resource": resource, | ||
| "roles": schema.NewSet(schema.HashString, roles.([]interface{})), | ||
| }) | ||
| } | ||
|
|
||
| return transformed | ||
| } | ||
|
|
||
| func gcpSecretBindingHash(v interface{}) int { | ||
| var buf bytes.Buffer | ||
| m := v.(map[string]interface{}) | ||
| buf.WriteString(fmt.Sprintf("%s-", m["resource"].(string))) | ||
|
|
||
| // We need to make sure to sort the strings below so that we always | ||
| // generate the same hash code no matter what is in the set. | ||
| if v, ok := m["roles"]; ok { | ||
| vs := v.(*schema.Set).List() | ||
| s := make([]string, len(vs)) | ||
| for i, raw := range vs { | ||
| s[i] = raw.(string) | ||
| } | ||
| sort.Strings(s) | ||
|
|
||
| for _, v := range s { | ||
| buf.WriteString(fmt.Sprintf("%s-", v)) | ||
| } | ||
| } | ||
| return hashcode.String(buf.String()) | ||
| } | ||
|
|
||
| func gcpSecretRenderBinding(binding *GCPBinding) string { | ||
| output := fmt.Sprintf("resource \"%s\" {\n", binding.Resource) | ||
| output = fmt.Sprintf("%s roles = %s\n", output, policyRenderListOfStrings(binding.Roles)) | ||
| return fmt.Sprintf("%s}\n", output) | ||
| } | ||
|
|
||
| func gcpSecretRenderBindings(bindings []*GCPBinding) string { | ||
| var output string | ||
|
|
||
| for i, binding := range bindings { | ||
| if i == 0 { | ||
| output = fmt.Sprintf("%s", gcpSecretRenderBinding(binding)) | ||
| } else { | ||
| output = fmt.Sprintf("%s\n\n%s", output, gcpSecretRenderBinding(binding)) | ||
| } | ||
| } | ||
|
|
||
| return output | ||
| } | ||
|
|
||
| func gcpSecretRenderBindingsFromData(v interface{}) string { | ||
| rawBindings := v.(*schema.Set).List() | ||
|
|
||
| bindings := make([]*GCPBinding, len(rawBindings)) | ||
|
|
||
| for i, binding := range rawBindings { | ||
| rawRoles := binding.(map[string]interface{})["roles"].(*schema.Set).List() | ||
| roles := make([]string, len(rawRoles)) | ||
| for j, role := range rawRoles { | ||
| roles[j] = role.(string) | ||
| } | ||
|
|
||
| binding := &GCPBinding{ | ||
| Resource: binding.(map[string]interface{})["resource"].(string), | ||
| Roles: roles, | ||
| } | ||
| bindings[i] = binding | ||
| } | ||
|
|
||
| return gcpSecretRenderBindings(bindings) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.