mirror of
https://github.com/letic/terraform-provider-google.git
synced 2024-09-06 17:16:44 +00:00
393 lines
11 KiB
Go
393 lines
11 KiB
Go
package google
|
|
|
|
import (
|
|
"fmt"
|
|
"log"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/hashicorp/terraform/helper/schema"
|
|
"google.golang.org/api/cloudbilling/v1"
|
|
"google.golang.org/api/cloudresourcemanager/v1"
|
|
"google.golang.org/api/googleapi"
|
|
)
|
|
|
|
// resourceGoogleProject returns a *schema.Resource that allows a customer
|
|
// to declare a Google Cloud Project resource.
|
|
func resourceGoogleProject() *schema.Resource {
|
|
return &schema.Resource{
|
|
SchemaVersion: 1,
|
|
|
|
Create: resourceGoogleProjectCreate,
|
|
Read: resourceGoogleProjectRead,
|
|
Update: resourceGoogleProjectUpdate,
|
|
Delete: resourceGoogleProjectDelete,
|
|
|
|
Importer: &schema.ResourceImporter{
|
|
State: resourceProjectImportState,
|
|
},
|
|
MigrateState: resourceGoogleProjectMigrateState,
|
|
|
|
Schema: map[string]*schema.Schema{
|
|
"project_id": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
ForceNew: true,
|
|
},
|
|
"skip_delete": &schema.Schema{
|
|
Type: schema.TypeBool,
|
|
Optional: true,
|
|
Computed: true,
|
|
},
|
|
"auto_create_network": &schema.Schema{
|
|
Type: schema.TypeBool,
|
|
Optional: true,
|
|
Default: true,
|
|
},
|
|
"name": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
},
|
|
"org_id": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Optional: true,
|
|
Computed: true,
|
|
ConflictsWith: []string{"folder_id"},
|
|
},
|
|
"folder_id": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Optional: true,
|
|
Computed: true,
|
|
ConflictsWith: []string{"org_id"},
|
|
StateFunc: parseFolderId,
|
|
},
|
|
"policy_data": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Optional: true,
|
|
Computed: true,
|
|
Removed: "Use the 'google_project_iam_policy' resource to define policies for a Google Project",
|
|
},
|
|
"policy_etag": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Computed: true,
|
|
Removed: "Use the the 'google_project_iam_policy' resource to define policies for a Google Project",
|
|
},
|
|
"number": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Computed: true,
|
|
},
|
|
"billing_account": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Optional: true,
|
|
},
|
|
"labels": &schema.Schema{
|
|
Type: schema.TypeMap,
|
|
Optional: true,
|
|
Elem: &schema.Schema{Type: schema.TypeString},
|
|
Set: schema.HashString,
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func resourceGoogleProjectCreate(d *schema.ResourceData, meta interface{}) error {
|
|
config := meta.(*Config)
|
|
|
|
var pid string
|
|
var err error
|
|
pid = d.Get("project_id").(string)
|
|
|
|
log.Printf("[DEBUG]: Creating new project %q", pid)
|
|
project := &cloudresourcemanager.Project{
|
|
ProjectId: pid,
|
|
Name: d.Get("name").(string),
|
|
}
|
|
|
|
getParentResourceId(d, project)
|
|
|
|
if _, ok := d.GetOk("labels"); ok {
|
|
project.Labels = expandLabels(d)
|
|
}
|
|
|
|
op, err := config.clientResourceManager.Projects.Create(project).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error creating project %s (%s): %s.", project.ProjectId, project.Name, err)
|
|
}
|
|
|
|
d.SetId(pid)
|
|
|
|
// Wait for the operation to complete
|
|
waitErr := resourceManagerOperationWait(config, op, "project to create")
|
|
if waitErr != nil {
|
|
// The resource wasn't actually created
|
|
d.SetId("")
|
|
return waitErr
|
|
}
|
|
|
|
// Set the billing account
|
|
if _, ok := d.GetOk("billing_account"); ok {
|
|
err = updateProjectBillingAccount(d, config)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
err = resourceGoogleProjectRead(d, meta)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// There's no such thing as "don't auto-create network", only "delete the network
|
|
// post-creation" - but that's what it's called in the UI and let's not confuse
|
|
// people if we don't have to. The GCP Console is doing the same thing - creating
|
|
// a network and deleting it in the background.
|
|
if !d.Get("auto_create_network").(bool) {
|
|
// The compute API has to be enabled before we can delete a network.
|
|
if err = enableService("compute.googleapis.com", project.ProjectId, config); err != nil {
|
|
return fmt.Errorf("Error enabling the Compute Engine API required to delete the default network: %s", err)
|
|
}
|
|
|
|
if err = forceDeleteComputeNetwork(project.ProjectId, "default", config); err != nil {
|
|
return fmt.Errorf("Error deleting default network in project %s: %s", project.ProjectId, err)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func resourceGoogleProjectRead(d *schema.ResourceData, meta interface{}) error {
|
|
config := meta.(*Config)
|
|
pid := d.Id()
|
|
|
|
// Read the project
|
|
p, err := config.clientResourceManager.Projects.Get(pid).Do()
|
|
if err != nil {
|
|
return handleNotFoundError(err, d, fmt.Sprintf("Project %q", pid))
|
|
}
|
|
|
|
// If the project has been deleted from outside Terraform, remove it from state file.
|
|
if p.LifecycleState != "ACTIVE" {
|
|
log.Printf("[WARN] Removing project '%s' because its state is '%s' (requires 'ACTIVE').", pid, p.LifecycleState)
|
|
d.SetId("")
|
|
return nil
|
|
}
|
|
|
|
d.Set("project_id", pid)
|
|
d.Set("number", strconv.FormatInt(int64(p.ProjectNumber), 10))
|
|
d.Set("name", p.Name)
|
|
d.Set("labels", p.Labels)
|
|
|
|
if p.Parent != nil {
|
|
switch p.Parent.Type {
|
|
case "organization":
|
|
d.Set("org_id", p.Parent.Id)
|
|
d.Set("folder_id", "")
|
|
case "folder":
|
|
d.Set("folder_id", p.Parent.Id)
|
|
d.Set("org_id", "")
|
|
}
|
|
}
|
|
|
|
// Read the billing account
|
|
ba, err := config.clientBilling.Projects.GetBillingInfo(prefixedProject(pid)).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error reading billing account for project %q: %v", prefixedProject(pid), err)
|
|
}
|
|
if ba.BillingAccountName != "" {
|
|
// BillingAccountName is contains the resource name of the billing account
|
|
// associated with the project, if any. For example,
|
|
// `billingAccounts/012345-567890-ABCDEF`. We care about the ID and not
|
|
// the `billingAccounts/` prefix, so we need to remove that. If the
|
|
// prefix ever changes, we'll validate to make sure it's something we
|
|
// recognize.
|
|
_ba := strings.TrimPrefix(ba.BillingAccountName, "billingAccounts/")
|
|
if ba.BillingAccountName == _ba {
|
|
return fmt.Errorf("Error parsing billing account for project %q. Expected value to begin with 'billingAccounts/' but got %s", prefixedProject(pid), ba.BillingAccountName)
|
|
}
|
|
d.Set("billing_account", _ba)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func prefixedProject(pid string) string {
|
|
return "projects/" + pid
|
|
}
|
|
|
|
func getParentResourceId(d *schema.ResourceData, p *cloudresourcemanager.Project) error {
|
|
if v, ok := d.GetOk("org_id"); ok {
|
|
org_id := v.(string)
|
|
p.Parent = &cloudresourcemanager.ResourceId{
|
|
Id: org_id,
|
|
Type: "organization",
|
|
}
|
|
}
|
|
|
|
if v, ok := d.GetOk("folder_id"); ok {
|
|
p.Parent = &cloudresourcemanager.ResourceId{
|
|
Id: parseFolderId(v),
|
|
Type: "folder",
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func parseFolderId(v interface{}) string {
|
|
folderId := v.(string)
|
|
if strings.HasPrefix(folderId, "folders/") {
|
|
return folderId[8:]
|
|
}
|
|
return folderId
|
|
}
|
|
|
|
func resourceGoogleProjectUpdate(d *schema.ResourceData, meta interface{}) error {
|
|
config := meta.(*Config)
|
|
pid := d.Id()
|
|
project_name := d.Get("name").(string)
|
|
|
|
// Read the project
|
|
// we need the project even though refresh has already been called
|
|
// because the API doesn't support patch, so we need the actual object
|
|
p, err := config.clientResourceManager.Projects.Get(pid).Do()
|
|
if err != nil {
|
|
if v, ok := err.(*googleapi.Error); ok && v.Code == http.StatusNotFound {
|
|
return fmt.Errorf("Project %q does not exist.", pid)
|
|
}
|
|
return fmt.Errorf("Error checking project %q: %s", pid, err)
|
|
}
|
|
|
|
d.Partial(true)
|
|
|
|
// Project display name has changed
|
|
if ok := d.HasChange("name"); ok {
|
|
p.Name = project_name
|
|
// Do update on project
|
|
p, err = config.clientResourceManager.Projects.Update(p.ProjectId, p).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error updating project %q: %s", project_name, err)
|
|
}
|
|
d.SetPartial("name")
|
|
}
|
|
|
|
// Project parent has changed
|
|
if d.HasChange("org_id") || d.HasChange("folder_id") {
|
|
getParentResourceId(d, p)
|
|
|
|
// Do update on project
|
|
p, err = config.clientResourceManager.Projects.Update(p.ProjectId, p).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error updating project %q: %s", project_name, err)
|
|
}
|
|
d.SetPartial("org_id")
|
|
d.SetPartial("folder_id")
|
|
}
|
|
|
|
// Billing account has changed
|
|
if ok := d.HasChange("billing_account"); ok {
|
|
err = updateProjectBillingAccount(d, config)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
// Project Labels have changed
|
|
if ok := d.HasChange("labels"); ok {
|
|
p.Labels = expandLabels(d)
|
|
|
|
// Do Update on project
|
|
p, err = config.clientResourceManager.Projects.Update(p.ProjectId, p).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error updating project %q: %s", project_name, err)
|
|
}
|
|
}
|
|
d.Partial(false)
|
|
|
|
return nil
|
|
}
|
|
|
|
func resourceGoogleProjectDelete(d *schema.ResourceData, meta interface{}) error {
|
|
config := meta.(*Config)
|
|
// Only delete projects if skip_delete isn't set
|
|
if !d.Get("skip_delete").(bool) {
|
|
pid := d.Id()
|
|
_, err := config.clientResourceManager.Projects.Delete(pid).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error deleting project %q: %s", pid, err)
|
|
}
|
|
}
|
|
d.SetId("")
|
|
return nil
|
|
}
|
|
|
|
func resourceProjectImportState(d *schema.ResourceData, meta interface{}) ([]*schema.ResourceData, error) {
|
|
// Explicitly set to default as a workaround for `ImportStateVerify` tests, and so that users
|
|
// don't see a diff immediately after import.
|
|
d.Set("auto_create_network", true)
|
|
return []*schema.ResourceData{d}, nil
|
|
}
|
|
|
|
// Delete a compute network along with the firewall rules inside it.
|
|
func forceDeleteComputeNetwork(projectId, networkName string, config *Config) error {
|
|
networkLink := fmt.Sprintf("https://www.googleapis.com/compute/v1/projects/%s/global/networks/%s", projectId, networkName)
|
|
|
|
token := ""
|
|
for paginate := true; paginate; {
|
|
filter := fmt.Sprintf("network eq %s", networkLink)
|
|
resp, err := config.clientCompute.Firewalls.List(projectId).Filter(filter).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error listing firewall rules in proj: %s", err)
|
|
}
|
|
|
|
log.Printf("[DEBUG] Found %d firewall rules in %q network", len(resp.Items), networkName)
|
|
|
|
for _, firewall := range resp.Items {
|
|
op, err := config.clientCompute.Firewalls.Delete(projectId, firewall.Name).Do()
|
|
if err != nil {
|
|
return fmt.Errorf("Error deleting firewall: %s", err)
|
|
}
|
|
err = computeSharedOperationWait(config.clientCompute, op, projectId, "Deleting Firewall")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
token = resp.NextPageToken
|
|
paginate = token != ""
|
|
}
|
|
|
|
return deleteComputeNetwork(projectId, networkName, config)
|
|
}
|
|
|
|
func updateProjectBillingAccount(d *schema.ResourceData, config *Config) error {
|
|
pid := d.Id()
|
|
name := d.Get("billing_account").(string)
|
|
ba := cloudbilling.ProjectBillingInfo{}
|
|
// If we're unlinking an existing billing account, an empty request does that, not an empty-string billing account.
|
|
if name != "" {
|
|
ba.BillingAccountName = "billingAccounts/" + name
|
|
}
|
|
_, err := config.clientBilling.Projects.UpdateBillingInfo(prefixedProject(pid), &ba).Do()
|
|
if err != nil {
|
|
d.Set("billing_account", "")
|
|
if _err, ok := err.(*googleapi.Error); ok {
|
|
return fmt.Errorf("Error setting billing account %q for project %q: %v", name, prefixedProject(pid), _err)
|
|
}
|
|
return fmt.Errorf("Error setting billing account %q for project %q: %v", name, prefixedProject(pid), err)
|
|
}
|
|
for retries := 0; retries < 3; retries++ {
|
|
err = resourceGoogleProjectRead(d, config)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if d.Get("billing_account").(string) == name {
|
|
break
|
|
}
|
|
time.Sleep(3)
|
|
}
|
|
if d.Get("billing_account").(string) != name {
|
|
return fmt.Errorf("Timed out waiting for billing account to return correct value. Waiting for %s, got %s.",
|
|
d.Get("billding_account").(string), name)
|
|
}
|
|
return nil
|
|
}
|