terraform-provider-google/google/iam_spanner_instance.go
Paddy Carver e686ea5d9b Add support for IAM on Spanner Instances.
Support managing IAM policies on Spanner instances.
2018-04-26 07:45:21 -07:00

131 lines
3.5 KiB
Go

package google
import (
"fmt"
"github.com/hashicorp/errwrap"
"github.com/hashicorp/terraform/helper/schema"
"google.golang.org/api/cloudresourcemanager/v1"
spanner "google.golang.org/api/spanner/v1"
)
var IamSpannerInstanceSchema = map[string]*schema.Schema{
"instance": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
},
"project": {
Type: schema.TypeString,
Optional: true,
Computed: true,
ForceNew: true,
},
}
type SpannerInstanceIamUpdater struct {
project string
instance string
Config *Config
}
func NewSpannerInstanceIamUpdater(d *schema.ResourceData, config *Config) (ResourceIamUpdater, error) {
project, err := getProject(d, config)
if err != nil {
return nil, err
}
return &SpannerInstanceIamUpdater{
project: project,
instance: d.Get("instance").(string),
Config: config,
}, nil
}
func SpannerInstanceIdParseFunc(d *schema.ResourceData, config *Config) error {
id, err := extractSpannerInstanceId(d.Id())
if err != nil {
return err
}
d.Set("instance", id.Instance)
d.Set("project", id.Project)
// Explicitly set the id so imported resources have the same ID format as non-imported ones.
d.SetId(id.terraformId())
return nil
}
func (u *SpannerInstanceIamUpdater) GetResourceIamPolicy() (*cloudresourcemanager.Policy, error) {
p, err := u.Config.clientSpanner.Projects.Instances.GetIamPolicy(spannerInstanceId{
Project: u.project,
Instance: u.instance,
}.instanceUri(), &spanner.GetIamPolicyRequest{}).Do()
if err != nil {
return nil, errwrap.Wrapf(fmt.Sprintf("Error retrieving IAM policy for %s: {{err}}", u.DescribeResource()), err)
}
cloudResourcePolicy, err := spannerToResourceManagerPolicy(p)
if err != nil {
return nil, errwrap.Wrapf(fmt.Sprintf("Invalid IAM policy for %s: {{err}}", u.DescribeResource()), err)
}
return cloudResourcePolicy, nil
}
func (u *SpannerInstanceIamUpdater) SetResourceIamPolicy(policy *cloudresourcemanager.Policy) error {
spannerPolicy, err := resourceManagerToSpannerPolicy(policy)
if err != nil {
return errwrap.Wrapf(fmt.Sprintf("Invalid IAM policy for %s: {{err}}", u.DescribeResource()), err)
}
_, err = u.Config.clientSpanner.Projects.Instances.SetIamPolicy(spannerInstanceId{
Project: u.project,
Instance: u.instance,
}.instanceUri(), &spanner.SetIamPolicyRequest{
Policy: spannerPolicy,
}).Do()
if err != nil {
return errwrap.Wrapf(fmt.Sprintf("Error setting IAM policy for %s: {{err}}", u.DescribeResource()), err)
}
return nil
}
func (u *SpannerInstanceIamUpdater) GetResourceId() string {
return spannerInstanceId{
Project: u.project,
Instance: u.instance,
}.terraformId()
}
func (u *SpannerInstanceIamUpdater) GetMutexKey() string {
return fmt.Sprintf("iam-spanner-instance-%s-%s", u.project, u.instance)
}
func (u *SpannerInstanceIamUpdater) DescribeResource() string {
return fmt.Sprintf("Spanner Instance: %s/%s", u.project, u.instance)
}
func resourceManagerToSpannerPolicy(p *cloudresourcemanager.Policy) (*spanner.Policy, error) {
out := &spanner.Policy{}
err := Convert(p, out)
if err != nil {
return nil, errwrap.Wrapf("Cannot convert a resourcemanager policy to a spanner policy: {{err}}", err)
}
return out, nil
}
func spannerToResourceManagerPolicy(p *spanner.Policy) (*cloudresourcemanager.Policy, error) {
out := &cloudresourcemanager.Policy{}
err := Convert(p, out)
if err != nil {
return nil, errwrap.Wrapf("Cannot convert a spanner policy to a resourcemanager policy: {{err}}", err)
}
return out, nil
}