2018-11-14 18:59:15 +00:00
|
|
|
package google
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"log"
|
|
|
|
|
|
|
|
"github.com/hashicorp/terraform/helper/schema"
|
2019-03-13 16:35:02 +00:00
|
|
|
sqladmin "google.golang.org/api/sqladmin/v1beta4"
|
2018-11-14 18:59:15 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
func resourceSqlSslCert() *schema.Resource {
|
|
|
|
return &schema.Resource{
|
|
|
|
Create: resourceSqlSslCertCreate,
|
|
|
|
Read: resourceSqlSslCertRead,
|
|
|
|
Delete: resourceSqlSslCertDelete,
|
|
|
|
|
|
|
|
SchemaVersion: 1,
|
|
|
|
|
|
|
|
Schema: map[string]*schema.Schema{
|
2018-12-14 20:51:11 +00:00
|
|
|
"common_name": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Required: true,
|
|
|
|
ForceNew: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"instance": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Required: true,
|
|
|
|
ForceNew: true,
|
|
|
|
},
|
|
|
|
|
2019-03-13 16:35:02 +00:00
|
|
|
"project": {
|
|
|
|
Type: schema.TypeString,
|
|
|
|
Optional: true,
|
|
|
|
Computed: true,
|
|
|
|
ForceNew: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"cert": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"cert_serial_number": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"create_time": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"expiration_time": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"private_key": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
Sensitive: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"server_ca_cert": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
},
|
|
|
|
|
2018-12-14 20:51:11 +00:00
|
|
|
"sha1_fingerprint": {
|
2018-11-14 18:59:15 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func resourceSqlSslCertCreate(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
config := meta.(*Config)
|
|
|
|
|
|
|
|
project, err := getProject(d, config)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
instance := d.Get("instance").(string)
|
|
|
|
commonName := d.Get("common_name").(string)
|
|
|
|
|
|
|
|
sslCertsInsertRequest := &sqladmin.SslCertsInsertRequest{
|
|
|
|
CommonName: commonName,
|
|
|
|
}
|
|
|
|
|
|
|
|
mutexKV.Lock(instanceMutexKey(project, instance))
|
|
|
|
defer mutexKV.Unlock(instanceMutexKey(project, instance))
|
|
|
|
resp, err := config.clientSqlAdmin.SslCerts.Insert(project, instance, sslCertsInsertRequest).Do()
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Error, failed to insert "+
|
|
|
|
"ssl cert %s into instance %s: %s", commonName, instance, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
err = sqladminOperationWait(config, resp.Operation, project, "Create Ssl Cert")
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Error, failure waiting for creation of %q "+
|
|
|
|
"in %q: %s", commonName, instance, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
fingerprint := resp.ClientCert.CertInfo.Sha1Fingerprint
|
|
|
|
d.SetId(fmt.Sprintf("%s/%s", instance, fingerprint))
|
|
|
|
d.Set("sha1_fingerprint", fingerprint)
|
|
|
|
|
|
|
|
// The private key is only returned on the initial insert so set it here.
|
|
|
|
d.Set("private_key", resp.ClientCert.CertPrivateKey)
|
|
|
|
d.Set("server_ca_cert", resp.ServerCaCert.Cert)
|
|
|
|
|
|
|
|
return resourceSqlSslCertRead(d, meta)
|
|
|
|
}
|
|
|
|
|
|
|
|
func resourceSqlSslCertRead(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
config := meta.(*Config)
|
|
|
|
|
|
|
|
project, err := getProject(d, config)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
instance := d.Get("instance").(string)
|
|
|
|
commonName := d.Get("common_name").(string)
|
|
|
|
fingerprint := d.Get("sha1_fingerprint").(string)
|
|
|
|
|
|
|
|
sslCerts, err := config.clientSqlAdmin.SslCerts.Get(project, instance, fingerprint).Do()
|
|
|
|
if err != nil {
|
|
|
|
return handleNotFoundError(err, d, fmt.Sprintf("SQL Ssl Cert %q in instance %q", commonName, instance))
|
|
|
|
}
|
|
|
|
|
|
|
|
if sslCerts == nil {
|
|
|
|
log.Printf("[WARN] Removing SQL Ssl Cert %q because it's gone", commonName)
|
|
|
|
d.SetId("")
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
d.Set("instance", sslCerts.Instance)
|
2019-03-13 16:35:02 +00:00
|
|
|
d.Set("project", project)
|
2018-11-14 18:59:15 +00:00
|
|
|
d.Set("sha1_fingerprint", sslCerts.Sha1Fingerprint)
|
|
|
|
d.Set("common_name", sslCerts.CommonName)
|
|
|
|
d.Set("cert", sslCerts.Cert)
|
|
|
|
d.Set("cert_serial_number", sslCerts.CertSerialNumber)
|
|
|
|
d.Set("create_time", sslCerts.CreateTime)
|
|
|
|
d.Set("expiration_time", sslCerts.ExpirationTime)
|
|
|
|
|
|
|
|
d.SetId(fmt.Sprintf("%s/%s", instance, fingerprint))
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func resourceSqlSslCertDelete(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
config := meta.(*Config)
|
|
|
|
|
|
|
|
project, err := getProject(d, config)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
instance := d.Get("instance").(string)
|
|
|
|
commonName := d.Get("common_name").(string)
|
|
|
|
fingerprint := d.Get("sha1_fingerprint").(string)
|
|
|
|
|
|
|
|
mutexKV.Lock(instanceMutexKey(project, instance))
|
|
|
|
defer mutexKV.Unlock(instanceMutexKey(project, instance))
|
|
|
|
op, err := config.clientSqlAdmin.SslCerts.Delete(project, instance, fingerprint).Do()
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Error, failed to delete "+
|
|
|
|
"ssl cert %q in instance %q: %s", commonName,
|
|
|
|
instance, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
err = sqladminOperationWait(config, op, project, "Delete Ssl Cert")
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Error, failure waiting for deletion of ssl cert %q "+
|
|
|
|
"in %q: %s", commonName, instance, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|