Skip to content

Commit

Permalink
Adds support for IAM Policies for Cloud Logging LogView (#10784)
Browse files Browse the repository at this point in the history
[upstream:e36fbd5f7b3939431caab88eea101ed8db306ea1]

Signed-off-by: Modular Magician <magic-modules@google.com>
  • Loading branch information
modular-magician committed May 24, 2024
1 parent 6c317fa commit 46af679
Show file tree
Hide file tree
Showing 5 changed files with 1,179 additions and 2 deletions.
8 changes: 6 additions & 2 deletions google-beta/provider/provider_mmv1_resources.go
Original file line number Diff line number Diff line change
Expand Up @@ -403,6 +403,7 @@ var generatedIAMDatasources = map[string]*schema.Resource{
"google_iap_web_region_backend_service_iam_policy": tpgiamresource.DataSourceIamPolicy(iap.IapWebRegionBackendServiceIamSchema, iap.IapWebRegionBackendServiceIamUpdaterProducer),
"google_iap_web_type_app_engine_iam_policy": tpgiamresource.DataSourceIamPolicy(iap.IapWebTypeAppEngineIamSchema, iap.IapWebTypeAppEngineIamUpdaterProducer),
"google_iap_web_type_compute_iam_policy": tpgiamresource.DataSourceIamPolicy(iap.IapWebTypeComputeIamSchema, iap.IapWebTypeComputeIamUpdaterProducer),
"google_logging_log_view_iam_policy": tpgiamresource.DataSourceIamPolicy(logging.LoggingLogViewIamSchema, logging.LoggingLogViewIamUpdaterProducer),
"google_network_security_address_group_iam_policy": tpgiamresource.DataSourceIamPolicy(networksecurity.NetworkSecurityProjectAddressGroupIamSchema, networksecurity.NetworkSecurityProjectAddressGroupIamUpdaterProducer),
"google_notebooks_instance_iam_policy": tpgiamresource.DataSourceIamPolicy(notebooks.NotebooksInstanceIamSchema, notebooks.NotebooksInstanceIamUpdaterProducer),
"google_notebooks_runtime_iam_policy": tpgiamresource.DataSourceIamPolicy(notebooks.NotebooksRuntimeIamSchema, notebooks.NotebooksRuntimeIamUpdaterProducer),
Expand Down Expand Up @@ -457,8 +458,8 @@ var handwrittenIAMDatasources = map[string]*schema.Resource{

// Resources
// Generated resources: 473
// Generated IAM resources: 276
// Total generated resources: 749
// Generated IAM resources: 279
// Total generated resources: 752
var generatedResources = map[string]*schema.Resource{
"google_folder_access_approval_settings": accessapproval.ResourceAccessApprovalFolderSettings(),
"google_organization_access_approval_settings": accessapproval.ResourceAccessApprovalOrganizationSettings(),
Expand Down Expand Up @@ -995,6 +996,9 @@ var generatedResources = map[string]*schema.Resource{
"google_logging_folder_settings": logging.ResourceLoggingFolderSettings(),
"google_logging_linked_dataset": logging.ResourceLoggingLinkedDataset(),
"google_logging_log_view": logging.ResourceLoggingLogView(),
"google_logging_log_view_iam_binding": tpgiamresource.ResourceIamBinding(logging.LoggingLogViewIamSchema, logging.LoggingLogViewIamUpdaterProducer, logging.LoggingLogViewIdParseFunc),
"google_logging_log_view_iam_member": tpgiamresource.ResourceIamMember(logging.LoggingLogViewIamSchema, logging.LoggingLogViewIamUpdaterProducer, logging.LoggingLogViewIdParseFunc),
"google_logging_log_view_iam_policy": tpgiamresource.ResourceIamPolicy(logging.LoggingLogViewIamSchema, logging.LoggingLogViewIamUpdaterProducer, logging.LoggingLogViewIdParseFunc),
"google_logging_metric": logging.ResourceLoggingMetric(),
"google_logging_organization_settings": logging.ResourceLoggingOrganizationSettings(),
"google_looker_instance": looker.ResourceLookerInstance(),
Expand Down
246 changes: 246 additions & 0 deletions google-beta/services/logging/iam_logging_log_view.go
Original file line number Diff line number Diff line change
@@ -0,0 +1,246 @@
// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: MPL-2.0

// ----------------------------------------------------------------------------
//
// *** AUTO GENERATED CODE *** Type: MMv1 ***
//
// ----------------------------------------------------------------------------
//
// This file is automatically generated by Magic Modules and manual
// changes will be clobbered when the file is regenerated.
//
// Please read more about how to change this file in
// .github/CONTRIBUTING.md.
//
// ----------------------------------------------------------------------------

package logging

import (
"fmt"

"github.com/hashicorp/errwrap"
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
"google.golang.org/api/cloudresourcemanager/v1"

"github.com/hashicorp/terraform-provider-google-beta/google-beta/tpgiamresource"
"github.com/hashicorp/terraform-provider-google-beta/google-beta/tpgresource"
transport_tpg "github.com/hashicorp/terraform-provider-google-beta/google-beta/transport"
)

var LoggingLogViewIamSchema = map[string]*schema.Schema{
"parent": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
},
"location": {
Type: schema.TypeString,
Computed: true,
Optional: true,
ForceNew: true,
},
"bucket": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
},
"name": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
DiffSuppressFunc: tpgresource.CompareSelfLinkOrResourceName,
},
}

type LoggingLogViewIamUpdater struct {
parent string
location string
bucket string
name string
d tpgresource.TerraformResourceData
Config *transport_tpg.Config
}

func LoggingLogViewIamUpdaterProducer(d tpgresource.TerraformResourceData, config *transport_tpg.Config) (tpgiamresource.ResourceIamUpdater, error) {
values := make(map[string]string)

if v, ok := d.GetOk("parent"); ok {
values["parent"] = v.(string)
}

location, _ := tpgresource.GetLocation(d, config)
if location != "" {
if err := d.Set("location", location); err != nil {
return nil, fmt.Errorf("Error setting location: %s", err)
}
}
values["location"] = location
if v, ok := d.GetOk("bucket"); ok {
values["bucket"] = v.(string)
}

if v, ok := d.GetOk("name"); ok {
values["name"] = v.(string)
}

// We may have gotten either a long or short name, so attempt to parse long name if possible
m, err := tpgresource.GetImportIdQualifiers([]string{"(?P<parent>.+)/locations/(?P<location>[^/]+)/buckets/(?P<bucket>[^/]+)/views/(?P<name>[^/]+)", "(?P<name>[^/]+)"}, d, config, d.Get("name").(string))
if err != nil {
return nil, err
}

for k, v := range m {
values[k] = v
}

u := &LoggingLogViewIamUpdater{
parent: values["parent"],
location: values["location"],
bucket: values["bucket"],
name: values["name"],
d: d,
Config: config,
}

if err := d.Set("parent", u.parent); err != nil {
return nil, fmt.Errorf("Error setting parent: %s", err)
}
if err := d.Set("location", u.location); err != nil {
return nil, fmt.Errorf("Error setting location: %s", err)
}
if err := d.Set("bucket", u.bucket); err != nil {
return nil, fmt.Errorf("Error setting bucket: %s", err)
}
if err := d.Set("name", u.GetResourceId()); err != nil {
return nil, fmt.Errorf("Error setting name: %s", err)
}

return u, nil
}

func LoggingLogViewIdParseFunc(d *schema.ResourceData, config *transport_tpg.Config) error {
values := make(map[string]string)

location, _ := tpgresource.GetLocation(d, config)
if location != "" {
values["location"] = location
}

m, err := tpgresource.GetImportIdQualifiers([]string{"(?P<parent>.+)/locations/(?P<location>[^/]+)/buckets/(?P<bucket>[^/]+)/views/(?P<name>[^/]+)", "(?P<name>[^/]+)"}, d, config, d.Id())
if err != nil {
return err
}

for k, v := range m {
values[k] = v
}

u := &LoggingLogViewIamUpdater{
parent: values["parent"],
location: values["location"],
bucket: values["bucket"],
name: values["name"],
d: d,
Config: config,
}
if err := d.Set("name", u.GetResourceId()); err != nil {
return fmt.Errorf("Error setting name: %s", err)
}
d.SetId(u.GetResourceId())
return nil
}

func (u *LoggingLogViewIamUpdater) GetResourceIamPolicy() (*cloudresourcemanager.Policy, error) {
url, err := u.qualifyLogViewUrl("getIamPolicy")
if err != nil {
return nil, err
}

var obj map[string]interface{}
obj = map[string]interface{}{
"options": map[string]interface{}{
"requestedPolicyVersion": tpgiamresource.IamPolicyVersion,
},
}

userAgent, err := tpgresource.GenerateUserAgentString(u.d, u.Config.UserAgent)
if err != nil {
return nil, err
}

policy, err := transport_tpg.SendRequest(transport_tpg.SendRequestOptions{
Config: u.Config,
Method: "POST",
RawURL: url,
UserAgent: userAgent,
Body: obj,
})
if err != nil {
return nil, errwrap.Wrapf(fmt.Sprintf("Error retrieving IAM policy for %s: {{err}}", u.DescribeResource()), err)
}

out := &cloudresourcemanager.Policy{}
err = tpgresource.Convert(policy, out)
if err != nil {
return nil, errwrap.Wrapf("Cannot convert a policy to a resource manager policy: {{err}}", err)
}

return out, nil
}

func (u *LoggingLogViewIamUpdater) SetResourceIamPolicy(policy *cloudresourcemanager.Policy) error {
json, err := tpgresource.ConvertToMap(policy)
if err != nil {
return err
}

obj := make(map[string]interface{})
obj["policy"] = json

url, err := u.qualifyLogViewUrl("setIamPolicy")
if err != nil {
return err
}

userAgent, err := tpgresource.GenerateUserAgentString(u.d, u.Config.UserAgent)
if err != nil {
return err
}

_, err = transport_tpg.SendRequest(transport_tpg.SendRequestOptions{
Config: u.Config,
Method: "POST",
RawURL: url,
UserAgent: userAgent,
Body: obj,
Timeout: u.d.Timeout(schema.TimeoutCreate),
})
if err != nil {
return errwrap.Wrapf(fmt.Sprintf("Error setting IAM policy for %s: {{err}}", u.DescribeResource()), err)
}

return nil
}

func (u *LoggingLogViewIamUpdater) qualifyLogViewUrl(methodIdentifier string) (string, error) {
urlTemplate := fmt.Sprintf("{{LoggingBasePath}}%s:%s", fmt.Sprintf("%s/locations/%s/buckets/%s/views/%s", u.parent, u.location, u.bucket, u.name), methodIdentifier)
url, err := tpgresource.ReplaceVars(u.d, u.Config, urlTemplate)
if err != nil {
return "", err
}
return url, nil
}

func (u *LoggingLogViewIamUpdater) GetResourceId() string {
return fmt.Sprintf("%s/locations/%s/buckets/%s/views/%s", u.parent, u.location, u.bucket, u.name)
}

func (u *LoggingLogViewIamUpdater) GetMutexKey() string {
return fmt.Sprintf("iam-logging-logview-%s", u.GetResourceId())
}

func (u *LoggingLogViewIamUpdater) DescribeResource() string {
return fmt.Sprintf("logging logview %q", u.GetResourceId())
}
Loading

0 comments on commit 46af679

Please sign in to comment.