|
| 1 | +package vcfa |
| 2 | + |
| 3 | +import ( |
| 4 | + "context" |
| 5 | + "fmt" |
| 6 | + "strings" |
| 7 | + |
| 8 | + "github.com/hashicorp/terraform-plugin-sdk/v2/diag" |
| 9 | + "github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema" |
| 10 | + "github.com/vmware/go-vcloud-director/v3/govcd" |
| 11 | + "github.com/vmware/go-vcloud-director/v3/types/v56" |
| 12 | +) |
| 13 | + |
| 14 | +const labelLocalUser = "Org Local User" |
| 15 | + |
| 16 | +func resourceVcfaLocalUser() *schema.Resource { |
| 17 | + return &schema.Resource{ |
| 18 | + CreateContext: resourceVcfaLocalUserCreate, |
| 19 | + ReadContext: resourceVcfaLocalUserRead, |
| 20 | + UpdateContext: resourceVcfaLocalUserUpdate, |
| 21 | + DeleteContext: resourceVcfaLocalUserDelete, |
| 22 | + Importer: &schema.ResourceImporter{ |
| 23 | + StateContext: resourceVcfaLocalUserImport, |
| 24 | + }, |
| 25 | + |
| 26 | + Schema: map[string]*schema.Schema{ |
| 27 | + "org_id": { |
| 28 | + Type: schema.TypeString, |
| 29 | + Required: true, |
| 30 | + ForceNew: true, |
| 31 | + Description: fmt.Sprintf("Parent %s ID for %s", labelVcfaOrg, labelLocalUser), |
| 32 | + }, |
| 33 | + "role_ids": { |
| 34 | + Type: schema.TypeSet, |
| 35 | + Required: true, |
| 36 | + Elem: &schema.Schema{Type: schema.TypeString}, |
| 37 | + Description: fmt.Sprintf("%ss to use for %s", labelVcfaRole, labelLocalUser), |
| 38 | + }, |
| 39 | + "username": { |
| 40 | + Type: schema.TypeString, |
| 41 | + Required: true, |
| 42 | + Description: fmt.Sprintf("%s username", labelLocalUser), |
| 43 | + }, |
| 44 | + "password": { |
| 45 | + Type: schema.TypeString, |
| 46 | + Required: true, |
| 47 | + Sensitive: true, |
| 48 | + Description: fmt.Sprintf("Password for %s", labelLocalUser), |
| 49 | + }, |
| 50 | + }, |
| 51 | + } |
| 52 | +} |
| 53 | + |
| 54 | +func resourceVcfaLocalUserCreate(ctx context.Context, d *schema.ResourceData, meta interface{}) diag.Diagnostics { |
| 55 | + vcfaClient := meta.(*VCDClient) |
| 56 | + tenantContext, err := getTenantContextFromOrgId(vcfaClient, d.Get("org_id").(string)) |
| 57 | + if err != nil { |
| 58 | + return diag.FromErr(err) |
| 59 | + } |
| 60 | + |
| 61 | + createFunc := func(config *types.OpenApiUser) (*govcd.OpenApiUser, error) { |
| 62 | + return vcfaClient.CreateUser(config, tenantContext) |
| 63 | + } |
| 64 | + |
| 65 | + c := crudConfig[*govcd.OpenApiUser, types.OpenApiUser]{ |
| 66 | + entityLabel: labelLocalUser, |
| 67 | + getTypeFunc: getLocalUserType, |
| 68 | + stateStoreFunc: setLocalUserData, |
| 69 | + createFunc: createFunc, |
| 70 | + resourceReadFunc: resourceVcfaLocalUserRead, |
| 71 | + } |
| 72 | + return createResource(ctx, d, meta, c) |
| 73 | +} |
| 74 | + |
| 75 | +func resourceVcfaLocalUserUpdate(ctx context.Context, d *schema.ResourceData, meta interface{}) diag.Diagnostics { |
| 76 | + vcfaClient := meta.(*VCDClient) |
| 77 | + tenantContext, err := getTenantContextFromOrgId(vcfaClient, d.Get("org_id").(string)) |
| 78 | + if err != nil { |
| 79 | + return diag.FromErr(err) |
| 80 | + } |
| 81 | + |
| 82 | + getByIdFunc := func(id string) (*govcd.OpenApiUser, error) { |
| 83 | + return vcfaClient.GetUserById(id, tenantContext) |
| 84 | + } |
| 85 | + |
| 86 | + c := crudConfig[*govcd.OpenApiUser, types.OpenApiUser]{ |
| 87 | + entityLabel: labelLocalUser, |
| 88 | + getTypeFunc: getLocalUserType, |
| 89 | + getEntityFunc: getByIdFunc, |
| 90 | + resourceReadFunc: resourceVcfaLocalUserRead, |
| 91 | + } |
| 92 | + |
| 93 | + return updateResource(ctx, d, meta, c) |
| 94 | +} |
| 95 | + |
| 96 | +func resourceVcfaLocalUserRead(ctx context.Context, d *schema.ResourceData, meta interface{}) diag.Diagnostics { |
| 97 | + vcfaClient := meta.(*VCDClient) |
| 98 | + tenantContext, err := getTenantContextFromOrgId(vcfaClient, d.Get("org_id").(string)) |
| 99 | + if err != nil { |
| 100 | + if govcd.ContainsNotFound(err) { // Org no longer exists, therefore user is also gone |
| 101 | + d.SetId("") |
| 102 | + return nil |
| 103 | + } |
| 104 | + return diag.FromErr(err) |
| 105 | + } |
| 106 | + |
| 107 | + getByIdFunc := func(id string) (*govcd.OpenApiUser, error) { |
| 108 | + return vcfaClient.GetUserById(id, tenantContext) |
| 109 | + } |
| 110 | + |
| 111 | + c := crudConfig[*govcd.OpenApiUser, types.OpenApiUser]{ |
| 112 | + entityLabel: labelLocalUser, |
| 113 | + getEntityFunc: getByIdFunc, |
| 114 | + stateStoreFunc: setLocalUserData, |
| 115 | + } |
| 116 | + return readResource(ctx, d, meta, c) |
| 117 | +} |
| 118 | + |
| 119 | +func resourceVcfaLocalUserDelete(ctx context.Context, d *schema.ResourceData, meta interface{}) diag.Diagnostics { |
| 120 | + vcfaClient := meta.(*VCDClient) |
| 121 | + |
| 122 | + tenantContext, err := getTenantContextFromOrgId(vcfaClient, d.Get("org_id").(string)) |
| 123 | + if err != nil { |
| 124 | + return diag.FromErr(err) |
| 125 | + } |
| 126 | + getByIdFunc := func(id string) (*govcd.OpenApiUser, error) { |
| 127 | + return vcfaClient.GetUserById(id, tenantContext) |
| 128 | + } |
| 129 | + |
| 130 | + c := crudConfig[*govcd.OpenApiUser, types.OpenApiUser]{ |
| 131 | + entityLabel: labelLocalUser, |
| 132 | + getEntityFunc: getByIdFunc, |
| 133 | + } |
| 134 | + |
| 135 | + return deleteResource(ctx, d, meta, c) |
| 136 | +} |
| 137 | + |
| 138 | +func resourceVcfaLocalUserImport(ctx context.Context, d *schema.ResourceData, meta interface{}) ([]*schema.ResourceData, error) { |
| 139 | + vcdClient := meta.(*VCDClient) |
| 140 | + |
| 141 | + idSlice := strings.Split(d.Id(), ImportSeparator) |
| 142 | + if len(idSlice) != 2 { |
| 143 | + return nil, fmt.Errorf("expected import ID to be <org name>%s<user name>", ImportSeparator) |
| 144 | + } |
| 145 | + |
| 146 | + org, err := vcdClient.GetTmOrgByName(idSlice[0]) |
| 147 | + if err != nil { |
| 148 | + return nil, fmt.Errorf("error getting %s: %s", labelVcfaOrg, err) |
| 149 | + } |
| 150 | + |
| 151 | + tenantContext := &govcd.TenantContext{ |
| 152 | + OrgId: org.TmOrg.ID, |
| 153 | + OrgName: org.TmOrg.Name, |
| 154 | + } |
| 155 | + |
| 156 | + user, err := vcdClient.GetUserByName(idSlice[1], tenantContext) |
| 157 | + if err != nil { |
| 158 | + return nil, fmt.Errorf("error retrieving %s: %s", labelLocalUser, err) |
| 159 | + } |
| 160 | + |
| 161 | + d.SetId(user.User.ID) |
| 162 | + dSet(d, "org_id", org.TmOrg.ID) |
| 163 | + |
| 164 | + return []*schema.ResourceData{d}, nil |
| 165 | +} |
| 166 | + |
| 167 | +func getLocalUserType(vcfaClient *VCDClient, d *schema.ResourceData) (*types.OpenApiUser, error) { |
| 168 | + org, err := vcfaClient.GetTmOrgById(d.Get("org_id").(string)) |
| 169 | + if err != nil { |
| 170 | + return nil, fmt.Errorf("error getting %s: %s", labelVcfaOrg, err) |
| 171 | + } |
| 172 | + |
| 173 | + roleSet := convertSchemaSetToSliceOfStrings(d.Get("role_ids").(*schema.Set)) |
| 174 | + t := &types.OpenApiUser{ |
| 175 | + OrgEntityRef: &types.OpenApiReference{ID: d.Get("org_id").(string), Name: org.TmOrg.Name}, |
| 176 | + Username: d.Get("username").(string), |
| 177 | + Password: d.Get("password").(string), |
| 178 | + ProviderType: "LOCAL", |
| 179 | + RoleEntityRefs: convertSliceOfStringsToOpenApiReferenceIds(roleSet), |
| 180 | + Locked: addrOf(false), |
| 181 | + } |
| 182 | + |
| 183 | + // Update requires ID being present |
| 184 | + if d.Id() != "" { // update operation |
| 185 | + t.ID = d.Id() |
| 186 | + user, err := vcfaClient.GetUserById(d.Id(), nil) |
| 187 | + if err != nil { |
| 188 | + return nil, fmt.Errorf("error retrieving %s by ID %s: %s", labelLocalUser, d.Id(), err) |
| 189 | + } |
| 190 | + // Name In Source must be set to "previous" username when performing update |
| 191 | + t.NameInSource = user.User.Username |
| 192 | + |
| 193 | + // if password has not changed - send exactly '******' to prevent updating password just like UI |
| 194 | + if !d.HasChange("password") { |
| 195 | + t.Password = "******" |
| 196 | + } |
| 197 | + } |
| 198 | + |
| 199 | + return t, nil |
| 200 | +} |
| 201 | + |
| 202 | +func setLocalUserData(_ *VCDClient, d *schema.ResourceData, user *govcd.OpenApiUser) error { |
| 203 | + if user == nil || user.User == nil { |
| 204 | + return fmt.Errorf("nil user structure") |
| 205 | + } |
| 206 | + d.SetId(user.User.ID) |
| 207 | + dSet(d, "username", user.User.Username) |
| 208 | + |
| 209 | + roleIds := extractIdsFromOpenApiReferences(user.User.RoleEntityRefs) |
| 210 | + err := d.Set("role_ids", roleIds) |
| 211 | + if err != nil { |
| 212 | + return fmt.Errorf("error storing 'role_ids': %s", err) |
| 213 | + } |
| 214 | + |
| 215 | + dSet(d, "org_id", "") |
| 216 | + if user.User.OrgEntityRef != nil { |
| 217 | + dSet(d, "org_id", user.User.OrgEntityRef.ID) |
| 218 | + } |
| 219 | + // dSet(d, "password", user.User.Password) // password is never returned on read |
| 220 | + |
| 221 | + return nil |
| 222 | +} |
0 commit comments