Resources for Custom TLS and Platform TLS products

.github/workflows/pr.yml

@@ -52,25 +52,6 @@ jobs:
       uses: actions/setup-go@v2
       with:
         go-version: 1.14.x
-    - name: Restore cached binaries
-      id: cache
-      uses: actions/cache@v2
-      with:
-        path: ~/go/bin
-        key: ${{ runner.os }}-go-bin-${{ hashFiles('**/go.sum') }}
-        restore-keys: |
-          ${{ runner.os }}-go-bin-
-    - name: Restore cached modules dependencies
-      uses: actions/cache@v2
-      with:
-        path: ~/go/pkg/mod
-        key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
-        restore-keys: |
-          ${{ runner.os }}-go-mod-
-    - name: Install dependencies
-      if: steps.cache.outputs.cache-hit != 'true'
-      run: make dependencies
-      shell: bash
     - name: Generate Docs
       run: |
         make generate-docs

.gitignore

@@ -7,6 +7,7 @@ terraform.tfstate
 bin/
 modules-dev/
 /pkg/
+playground/
 website/.vagrant
 website/.bundle
 website/build

GNUmakefile

@@ -52,18 +52,20 @@ test-compile:
 	fi
 	go test -c $(TEST) $(TESTARGS)
 
-dependencies:
-	@echo "Download go.mod dependencies"
-	@go mod download
-
-install-tools: dependencies
+BIN=$(CURDIR)/bin
+$(BIN)/%:
 	@echo "Installing tools from tools/tools.go"
-	@cat tools/tools.go | grep _ | awk -F '"' '{print $$2}' | xargs -tI {} go install {}
+	@cat tools/tools.go | grep _ | awk -F '"' '{print $$2}' | GOBIN=$(BIN) xargs -tI {} go install {}
+
+# Inject ./bin into PATH to allow scripts/generate-docs.go to access local tfplugindocs binary
+generate-docs: $(BIN)/tfplugindocs
+	PATH=$(PATH):$(BIN) go run scripts/generate-docs.go
 
-generate-docs: install-tools
-	go run scripts/generate-docs.go
+validate-docs: $(BIN)/tfplugindocs
+	$(BIN)/tfplugindocs validate
 
-validate-docs: install-tools
-	tfplugindocs validate
+sweep:
+	@echo "WARNING: This will destroy infrastructure. Use only in development accounts."
+	go test ./fastly -v -sweep=ALL $(SWEEPARGS) -timeout 30m
 
-.PHONY: build test testacc vet fmt fmtcheck errcheck test-compile validate-docs generate-docs install-tools dependencies
+.PHONY: build test testacc vet fmt fmtcheck errcheck test-compile sweep validate-docs generate-docs

docs/data-sources/tls_activation.md

@@ -0,0 +1,38 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_activation"
+sidebar_current: "docs-fastly-datasource-tls_activation"
+description: |-
+Get information on Fastly TLS Activation.
+---
+
+# fastly_tls_activation
+
+Use this data source to get information on a TLS activation, including the certificate used, and the domain on which TLS was enabled.
+
+~> **Warning:** The data source's filters are applied using an **AND** boolean operator, so depending on the combination
+of filters, they may become mutually exclusive. The exception to this is `id` which must not be specified in combination
+with any of the others.
+
+~> **Note:** If more or less than a single match is returned by the search, Terraform will fail. Ensure that your search is specific enough to return a single key.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_activation" "example" {
+  domain = "example.com"
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **certificate_id** (String) ID of the TLS Certificate used.
+- **configuration_id** (String) ID of the TLS Configuration used.
+- **domain** (String) Domain that TLS was enabled on.
+- **id** (String) Fastly Activation ID. Conflicts with all other filters.
+
+### Read-Only
+
+- **created_at** (String) Timestamp (GMT) when TLS was enabled.

docs/data-sources/tls_activation_ids.md

@@ -0,0 +1,41 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_activation_ids"
+sidebar_current: "docs-fastly-datasource-tls_activation_ids"
+description: |-
+Get the list of TLS Activation identifiers in Fastly.
+---
+
+# fastly_tls_activation_ids
+
+Use this data source to get the list of TLS Activation identifiers in Fastly.
+
+## Example Usage
+
+```hcl
+
+data "fastly_tls_activation_ids" "example" {
+  certificate_id = fastly_tls_certificate.example.id
+}
+
+data "fastly_tls_activation" "example" {
+  for_each = data.fastly_tls_activation_ids.example.ids
+  id       = each.value
+}
+
+output "activation_domains" {
+  value = [for a in data.fastly_tls_activation.example : a.domain]
+}
+
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **certificate_id** (String) ID of TLS certificate used to filter activations
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **ids** (Set of String) List of IDs of the TLS Activations.

docs/data-sources/tls_certificate.md

@@ -0,0 +1,43 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_certificate"
+sidebar_current: "docs-fastly-datasource-tls_certificate"
+description: |-
+Get information on Fastly TLS certificate.
+---
+
+# fastly_tls_certificate
+
+Use this data source to get information of a TLS certificate for use with other resources.
+
+~> **Warning:** The data source's filters are applied using an **AND** boolean operator, so depending on the combination
+of filters, they may become mutually exclusive. The exception to this is `id` which must not be specified in combination
+with any of the others.
+
+~> **Note:** If more or less than a single match is returned by the search, Terraform will fail. Ensure that your search is specific enough to return a single key.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_certificate" "example" {
+  name = "example.com"
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **domains** (Set of String) Domains that are listed in any certificates' Subject Alternative Names (SAN) list.
+- **id** (String) Unique ID assigned to certificate by Fastly
+- **issued_to** (String) The hostname for which a certificate was issued.
+- **issuer** (String) The certificate authority that issued the certificate.
+- **name** (String) Human-readable name used to identify the certificate. Defaults to the certificate's Common Name or first Subject Alternative Name entry.
+
+### Read-Only
+
+- **created_at** (String) Timestamp (GMT) when the certificate was created
+- **replace** (Boolean) A recommendation from Fastly indicating the key associated with this certificate is in need of rotation
+- **serial_number** (String) A value assigned by the issuer that is unique to a certificate
+- **signature_algorithm** (String) The algorithm used to sign the certificate
+- **updated_at** (String) Timestamp (GMT) when the certificate was last updated

docs/data-sources/tls_certificate_ids.md

@@ -0,0 +1,32 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_certificate_ids"
+sidebar_current: "docs-fastly-datasource-tls_certificate_ids"
+description: |-
+Get IDs of available TLS certificates.
+---
+
+# fastly_tls_certificate_ids
+
+Use this data source to get the IDs of available TLS certificates for use with other resources.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_certificate_ids" "example" {}
+
+resource "fastly_tls_activation" "example" {
+  certificate_id = data.fastly_tls_certificate_ids.example.ids[0]
+  // ...
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **ids** (List of String) List of IDs corresponding to Custom TLS certificates.

docs/data-sources/tls_configuration.md

@@ -0,0 +1,56 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_configuration"
+sidebar_current: "docs-fastly-datasource-tls_configuration"
+description: |-
+Get information on Fastly TLS configuration.
+---
+
+# fastly_tls_configuration
+
+Use this data source to get the ID of a TLS configuration for use with other resources.
+
+~> **Warning:** The data source's filters are applied using an **AND** boolean operator, so depending on the combination
+of filters, they may become mutually exclusive. The exception to this is `id` which must not be specified in combination
+with any of the others.
+
+~> **Note:** If more or less than a single match is returned by the search, Terraform will fail. Ensure that your search is specific enough to return a single key.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_configuration" "example" {
+  default = true
+}
+
+resource "fastly_tls_activation" "example" {
+  configuration_id = data.fastly_tls_configuration.example.id
+  // ...
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **default** (Boolean) Signifies whether Fastly will use this configuration as a default when creating a new TLS activation.
+- **http_protocols** (Set of String) HTTP protocols available on the TLS configuration.
+- **id** (String) ID of the TLS configuration obtained from the Fastly API or another data source. Conflicts with all the other filters.
+- **name** (String) Custom name of the TLS configuration.
+- **tls_protocols** (Set of String) TLS protocols available on the TLS configuration.
+- **tls_service** (String) Whether the configuration should support the `PLATFORM` or `CUSTOM` TLS service.
+
+### Read-Only
+
+- **created_at** (String) Timestamp (GMT) when the configuration was created.
+- **dns_records** (Set of Object) The available DNS addresses that can be used to enable TLS for a domain. DNS must be configured for a domain for TLS handshakes to succeed. If enabling TLS on an apex domain (e.g. `example.com`) you must create four A records (or four AAAA records for IPv6 support) using the displayed global A record's IP addresses with your DNS provider. For subdomains and wildcard domains (e.g. `www.example.com` or `*.example.com`) you will need to create a relevant CNAME record. (see [below for nested schema](#nestedatt--dns_records))
+- **updated_at** (String) Timestamp (GMT) when the configuration was last updated.
+
+<a id="nestedatt--dns_records"></a>
+### Nested Schema for `dns_records`
+
+Read-Only:
+
+- **record_type** (String)
+- **record_value** (String)
+- **region** (String)

docs/data-sources/tls_configuration_ids.md

@@ -0,0 +1,32 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_configuration_ids"
+sidebar_current: "docs-fastly-datasource-tls_configuration_ids"
+description: |-
+Get IDs of available TLS Configurations.
+---
+
+# fastly_tls_configuration_ids
+
+Use this data source to get the IDs of available TLS configurations for use with other resources.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_configuration_ids" "example" {}
+
+resource "fastly_tls_activation" "example" {
+  configuration_id = data.fastly_tls_configuration.example.ids[0]
+  // ...
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **ids** (List of String) List of IDs corresponding to available TLS configurations.

docs/data-sources/tls_platform_certificate.md

@@ -0,0 +1,41 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_platform_certificate"
+sidebar_current: "docs-fastly-datasource-tls_platform_certificate"
+description: |-
+Get information on Fastly Platform TLS certificate.
+---
+
+# fastly_tls_platform_certificate
+
+Use this data source to get information of a Platform TLS certificate for use with other resources.
+
+~> **Warning:** The data source's filters are applied using an **AND** boolean operator, so depending on the combination
+of filters, they may become mutually exclusive. The exception to this is `id` which must not be specified in combination
+with any of the others.
+
+~> **Note:** If more or less than a single match is returned by the search, Terraform will fail. Ensure that your search is specific enough to return a single key.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_platform_certificate" "example" {
+  domains = ["example.com"]
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **domains** (Set of String) Domains that are listed in any certificate's Subject Alternative Names (SAN) list.
+- **id** (String) Unique ID assigned to certificate by Fastly. Conflicts with all the other filters.
+
+### Read-Only
+
+- **configuration_id** (String) ID of TLS configuration used to terminate TLS traffic.
+- **created_at** (String) Timestamp (GMT) when the certificate was created.
+- **not_after** (String) Timestamp (GMT) when the certificate will expire.
+- **not_before** (String) Timestamp (GMT) when the certificate will become valid.
+- **replace** (Boolean) A recommendation from Fastly indicating the key associated with this certificate is in need of rotation.
+- **updated_at** (String) Timestamp (GMT) when the certificate was last updated.

docs/data-sources/tls_platform_certificate_ids.md

@@ -0,0 +1,31 @@
+---
+layout: "fastly"
+page_title: "Fastly: fastly_tls_platform_certificate_ids"
+sidebar_current: "docs-fastly-datasource-tls_platform_certificate_ids"
+description: |-
+Get IDs of available Platform TLS certificates.
+---
+
+# fastly_tls_platform_certificate_ids
+
+Use this data source to get the IDs of available Platform TLS Certificates for use with other resources.
+
+## Example Usage
+
+```hcl
+data "fastly_tls_platform_certificate_ids" "example" {}
+
+data "fastly_tls_platform_certificate" "example" {
+  id = data.fastly_tls_platform_certificate_ids.example.ids[0]
+}
+```
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **ids** (List of String) List of IDs corresponding to Platform TLS certificates.