Skip to content

Commit

Permalink
IAM for Colab runtime template (#12742) (#9091)
Browse files Browse the repository at this point in the history
[upstream:d0350e9490aa254daf9397b55e50bdaffe114598]

Signed-off-by: Modular Magician <magic-modules@google.com>
  • Loading branch information
modular-magician authored Jan 17, 2025
1 parent 8426e76 commit d0f36a3
Show file tree
Hide file tree
Showing 6 changed files with 734 additions and 2 deletions.
3 changes: 3 additions & 0 deletions .changelog/12742.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
```release-note: enhancement
colab: Added IAM to `google_colab_runtime_template`.
```
8 changes: 6 additions & 2 deletions google-beta/provider/provider_mmv1_resources.go
Original file line number Diff line number Diff line change
Expand Up @@ -415,6 +415,7 @@ var generatedIAMDatasources = map[string]*schema.Resource{
"google_cloud_run_v2_job_iam_policy": tpgiamresource.DataSourceIamPolicy(cloudrunv2.CloudRunV2JobIamSchema, cloudrunv2.CloudRunV2JobIamUpdaterProducer),
"google_cloud_run_v2_service_iam_policy": tpgiamresource.DataSourceIamPolicy(cloudrunv2.CloudRunV2ServiceIamSchema, cloudrunv2.CloudRunV2ServiceIamUpdaterProducer),
"google_cloud_tasks_queue_iam_policy": tpgiamresource.DataSourceIamPolicy(cloudtasks.CloudTasksQueueIamSchema, cloudtasks.CloudTasksQueueIamUpdaterProducer),
"google_colab_runtime_template_iam_policy": tpgiamresource.DataSourceIamPolicy(colab.ColabRuntimeTemplateIamSchema, colab.ColabRuntimeTemplateIamUpdaterProducer),
"google_compute_backend_bucket_iam_policy": tpgiamresource.DataSourceIamPolicy(compute.ComputeBackendBucketIamSchema, compute.ComputeBackendBucketIamUpdaterProducer),
"google_compute_backend_service_iam_policy": tpgiamresource.DataSourceIamPolicy(compute.ComputeBackendServiceIamSchema, compute.ComputeBackendServiceIamUpdaterProducer),
"google_compute_disk_iam_policy": tpgiamresource.DataSourceIamPolicy(compute.ComputeDiskIamSchema, compute.ComputeDiskIamUpdaterProducer),
Expand Down Expand Up @@ -522,8 +523,8 @@ var handwrittenIAMDatasources = map[string]*schema.Resource{

// Resources
// Generated resources: 590
// Generated IAM resources: 297
// Total generated resources: 887
// Generated IAM resources: 300
// Total generated resources: 890
var generatedResources = map[string]*schema.Resource{
"google_folder_access_approval_settings": accessapproval.ResourceAccessApprovalFolderSettings(),
"google_organization_access_approval_settings": accessapproval.ResourceAccessApprovalOrganizationSettings(),
Expand Down Expand Up @@ -719,6 +720,9 @@ var generatedResources = map[string]*schema.Resource{
"google_cloud_tasks_queue_iam_policy": tpgiamresource.ResourceIamPolicy(cloudtasks.CloudTasksQueueIamSchema, cloudtasks.CloudTasksQueueIamUpdaterProducer, cloudtasks.CloudTasksQueueIdParseFunc),
"google_colab_runtime": colab.ResourceColabRuntime(),
"google_colab_runtime_template": colab.ResourceColabRuntimeTemplate(),
"google_colab_runtime_template_iam_binding": tpgiamresource.ResourceIamBinding(colab.ColabRuntimeTemplateIamSchema, colab.ColabRuntimeTemplateIamUpdaterProducer, colab.ColabRuntimeTemplateIdParseFunc),
"google_colab_runtime_template_iam_member": tpgiamresource.ResourceIamMember(colab.ColabRuntimeTemplateIamSchema, colab.ColabRuntimeTemplateIamUpdaterProducer, colab.ColabRuntimeTemplateIdParseFunc),
"google_colab_runtime_template_iam_policy": tpgiamresource.ResourceIamPolicy(colab.ColabRuntimeTemplateIamSchema, colab.ColabRuntimeTemplateIamUpdaterProducer, colab.ColabRuntimeTemplateIdParseFunc),
"google_composer_user_workloads_config_map": composer.ResourceComposerUserWorkloadsConfigMap(),
"google_compute_address": compute.ResourceComputeAddress(),
"google_compute_autoscaler": compute.ResourceComputeAutoscaler(),
Expand Down
245 changes: 245 additions & 0 deletions google-beta/services/colab/iam_colab_runtime_template.go
Original file line number Diff line number Diff line change
@@ -0,0 +1,245 @@
// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: MPL-2.0

// ----------------------------------------------------------------------------
//
// *** AUTO GENERATED CODE *** Type: MMv1 ***
//
// ----------------------------------------------------------------------------
//
// This file is automatically generated by Magic Modules and manual
// changes will be clobbered when the file is regenerated.
//
// Please read more about how to change this file in
// .github/CONTRIBUTING.md.
//
// ----------------------------------------------------------------------------

package colab

import (
"fmt"

"github.com/hashicorp/errwrap"
"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
"google.golang.org/api/cloudresourcemanager/v1"

"github.com/hashicorp/terraform-provider-google-beta/google-beta/tpgiamresource"
"github.com/hashicorp/terraform-provider-google-beta/google-beta/tpgresource"
transport_tpg "github.com/hashicorp/terraform-provider-google-beta/google-beta/transport"
)

var ColabRuntimeTemplateIamSchema = map[string]*schema.Schema{
"project": {
Type: schema.TypeString,
Computed: true,
Optional: true,
ForceNew: true,
},
"location": {
Type: schema.TypeString,
Computed: true,
Optional: true,
ForceNew: true,
},
"runtime_template": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
DiffSuppressFunc: tpgresource.CompareSelfLinkOrResourceName,
},
}

type ColabRuntimeTemplateIamUpdater struct {
project string
location string
runtimeTemplate string
d tpgresource.TerraformResourceData
Config *transport_tpg.Config
}

func ColabRuntimeTemplateIamUpdaterProducer(d tpgresource.TerraformResourceData, config *transport_tpg.Config) (tpgiamresource.ResourceIamUpdater, error) {
values := make(map[string]string)

project, _ := tpgresource.GetProject(d, config)
if project != "" {
if err := d.Set("project", project); err != nil {
return nil, fmt.Errorf("Error setting project: %s", err)
}
}
values["project"] = project
location, _ := tpgresource.GetLocation(d, config)
if location != "" {
if err := d.Set("location", location); err != nil {
return nil, fmt.Errorf("Error setting location: %s", err)
}
}
values["location"] = location
if v, ok := d.GetOk("runtime_template"); ok {
values["runtime_template"] = v.(string)
}

// We may have gotten either a long or short name, so attempt to parse long name if possible
m, err := tpgresource.GetImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/locations/(?P<location>[^/]+)/notebookRuntimeTemplates/(?P<runtime_template>[^/]+)", "(?P<project>[^/]+)/(?P<location>[^/]+)/(?P<runtime_template>[^/]+)", "(?P<location>[^/]+)/(?P<runtime_template>[^/]+)", "(?P<runtime_template>[^/]+)"}, d, config, d.Get("runtime_template").(string))
if err != nil {
return nil, err
}

for k, v := range m {
values[k] = v
}

u := &ColabRuntimeTemplateIamUpdater{
project: values["project"],
location: values["location"],
runtimeTemplate: values["runtime_template"],
d: d,
Config: config,
}

if err := d.Set("project", u.project); err != nil {
return nil, fmt.Errorf("Error setting project: %s", err)
}
if err := d.Set("location", u.location); err != nil {
return nil, fmt.Errorf("Error setting location: %s", err)
}
if err := d.Set("runtime_template", u.GetResourceId()); err != nil {
return nil, fmt.Errorf("Error setting runtime_template: %s", err)
}

return u, nil
}

func ColabRuntimeTemplateIdParseFunc(d *schema.ResourceData, config *transport_tpg.Config) error {
values := make(map[string]string)

project, _ := tpgresource.GetProject(d, config)
if project != "" {
values["project"] = project
}

location, _ := tpgresource.GetLocation(d, config)
if location != "" {
values["location"] = location
}

m, err := tpgresource.GetImportIdQualifiers([]string{"projects/(?P<project>[^/]+)/locations/(?P<location>[^/]+)/notebookRuntimeTemplates/(?P<runtime_template>[^/]+)", "(?P<project>[^/]+)/(?P<location>[^/]+)/(?P<runtime_template>[^/]+)", "(?P<location>[^/]+)/(?P<runtime_template>[^/]+)", "(?P<runtime_template>[^/]+)"}, d, config, d.Id())
if err != nil {
return err
}

for k, v := range m {
values[k] = v
}

u := &ColabRuntimeTemplateIamUpdater{
project: values["project"],
location: values["location"],
runtimeTemplate: values["runtime_template"],
d: d,
Config: config,
}
if err := d.Set("runtime_template", u.GetResourceId()); err != nil {
return fmt.Errorf("Error setting runtime_template: %s", err)
}
d.SetId(u.GetResourceId())
return nil
}

func (u *ColabRuntimeTemplateIamUpdater) GetResourceIamPolicy() (*cloudresourcemanager.Policy, error) {
url, err := u.qualifyRuntimeTemplateUrl("getIamPolicy")
if err != nil {
return nil, err
}

project, err := tpgresource.GetProject(u.d, u.Config)
if err != nil {
return nil, err
}
var obj map[string]interface{}

userAgent, err := tpgresource.GenerateUserAgentString(u.d, u.Config.UserAgent)
if err != nil {
return nil, err
}

policy, err := transport_tpg.SendRequest(transport_tpg.SendRequestOptions{
Config: u.Config,
Method: "POST",
Project: project,
RawURL: url,
UserAgent: userAgent,
Body: obj,
})
if err != nil {
return nil, errwrap.Wrapf(fmt.Sprintf("Error retrieving IAM policy for %s: {{err}}", u.DescribeResource()), err)
}

out := &cloudresourcemanager.Policy{}
err = tpgresource.Convert(policy, out)
if err != nil {
return nil, errwrap.Wrapf("Cannot convert a policy to a resource manager policy: {{err}}", err)
}

return out, nil
}

func (u *ColabRuntimeTemplateIamUpdater) SetResourceIamPolicy(policy *cloudresourcemanager.Policy) error {
json, err := tpgresource.ConvertToMap(policy)
if err != nil {
return err
}

obj := make(map[string]interface{})
obj["policy"] = json

url, err := u.qualifyRuntimeTemplateUrl("setIamPolicy")
if err != nil {
return err
}
project, err := tpgresource.GetProject(u.d, u.Config)
if err != nil {
return err
}

userAgent, err := tpgresource.GenerateUserAgentString(u.d, u.Config.UserAgent)
if err != nil {
return err
}

_, err = transport_tpg.SendRequest(transport_tpg.SendRequestOptions{
Config: u.Config,
Method: "POST",
Project: project,
RawURL: url,
UserAgent: userAgent,
Body: obj,
Timeout: u.d.Timeout(schema.TimeoutCreate),
})
if err != nil {
return errwrap.Wrapf(fmt.Sprintf("Error setting IAM policy for %s: {{err}}", u.DescribeResource()), err)
}

return nil
}

func (u *ColabRuntimeTemplateIamUpdater) qualifyRuntimeTemplateUrl(methodIdentifier string) (string, error) {
urlTemplate := fmt.Sprintf("{{ColabBasePath}}%s:%s", fmt.Sprintf("projects/%s/locations/%s/notebookRuntimeTemplates/%s", u.project, u.location, u.runtimeTemplate), methodIdentifier)
url, err := tpgresource.ReplaceVars(u.d, u.Config, urlTemplate)
if err != nil {
return "", err
}
return url, nil
}

func (u *ColabRuntimeTemplateIamUpdater) GetResourceId() string {
return fmt.Sprintf("projects/%s/locations/%s/notebookRuntimeTemplates/%s", u.project, u.location, u.runtimeTemplate)
}

func (u *ColabRuntimeTemplateIamUpdater) GetMutexKey() string {
return fmt.Sprintf("iam-colab-runtimetemplate-%s", u.GetResourceId())
}

func (u *ColabRuntimeTemplateIamUpdater) DescribeResource() string {
return fmt.Sprintf("colab runtimetemplate %q", u.GetResourceId())
}
Loading

0 comments on commit d0f36a3

Please sign in to comment.