Support enable secure-by-default

api/container/containerv2/vpcs.go

@@ -29,6 +29,7 @@ type vpc struct {
 type VPCs interface {
 	ListVPCs(target ClusterTargetHeader) ([]VPCConfig, error)
 	SetOutboundTrafficProtection(string, bool, ClusterTargetHeader) error
+	EnableSecureByDefault(string, bool, ClusterTargetHeader) error
 }
 
 func newVPCsAPI(c *client.Client) VPCs {
@@ -63,3 +64,20 @@ func (v *vpc) SetOutboundTrafficProtection(clusterID string, enable bool, target
 
 	return err
 }
+
+type EnableSecureByDefaultClusterRequest struct {
+	Cluster                          string `json:"cluster" binding:"required"`
+	DisableOutboundTrafficProtection bool   `json:"disableOutboundTrafficProtection,omitempty"`
+}
+
+// Enable Secure by Default
+func (v *vpc) EnableSecureByDefault(clusterID string, enable bool, target ClusterTargetHeader) error {
+	request := EnableSecureByDefaultClusterRequest{
+		Cluster:                          clusterID,
+		DisableOutboundTrafficProtection: enable,
+	}
+
+	_, err := v.client.Post("/network/v2/secure-by-default/enable", request, nil, target.ToMap())
+
+	return err
+}

api/container/containerv2/vpcs_test.go

@@ -115,6 +115,48 @@ var _ = Describe("VPCs", func() {
 		})
 	})
 
+	// Enable secure by default
+	Describe("Enable Secure by Default", func() {
+		Context("When EnableSecureByDefault is successful", func() {
+			BeforeEach(func() {
+				server = ghttp.NewServer()
+				server.AppendHandlers(
+					ghttp.CombineHandlers(
+						ghttp.VerifyRequest(http.MethodPost, "/network/v2/secure-by-default/enable"),
+						ghttp.VerifyJSON(`{"cluster":"testCluster","disableOutboundTrafficProtection":true}`),
+						ghttp.RespondWith(http.StatusOK, ""),
+					),
+				)
+			})
+
+			It("should return with 200 OK", func() {
+				target := ClusterTargetHeader{}
+
+				err := newVPCs(server.URL()).EnableSecureByDefault("testCluster", true, target)
+				Expect(err).NotTo(HaveOccurred())
+			})
+		})
+		Context("When EnableSecureByDefault is unsuccessful", func() {
+			BeforeEach(func() {
+				server = ghttp.NewServer()
+				server.SetAllowUnhandledRequests(true)
+				server.AppendHandlers(
+					ghttp.CombineHandlers(
+						ghttp.VerifyRequest(http.MethodPost, "/network/v2/secure-by-default/enable"),
+						ghttp.VerifyJSON(`{"cluster":"testCluster"}`),
+						ghttp.RespondWith(http.StatusInternalServerError, ""),
+					),
+				)
+			})
+
+			It("should return with 500 Internal server error", func() {
+				target := ClusterTargetHeader{}
+				err := newVPCs(server.URL()).EnableSecureByDefault("testCluster", false, target)
+				Expect(err).To(HaveOccurred())
+			})
+		})
+	})
+
 })
 
 func newVPCs(url string) VPCs {