terraform/builtin/providers/openstack/resource_openstack_fw_polic...

218 lines
5.5 KiB
Go
Raw Normal View History

2015-02-03 20:56:13 +01:00
package openstack
import (
"fmt"
"log"
"time"
"github.com/gophercloud/gophercloud"
"github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/fwaas/policies"
"github.com/hashicorp/terraform/helper/resource"
2015-02-03 20:56:13 +01:00
"github.com/hashicorp/terraform/helper/schema"
)
func resourceFWPolicyV1() *schema.Resource {
2015-02-03 20:56:13 +01:00
return &schema.Resource{
Create: resourceFWPolicyV1Create,
Read: resourceFWPolicyV1Read,
Update: resourceFWPolicyV1Update,
Delete: resourceFWPolicyV1Delete,
Importer: &schema.ResourceImporter{
State: schema.ImportStatePassthrough,
},
2015-02-03 20:56:13 +01:00
Schema: map[string]*schema.Schema{
"region": &schema.Schema{
Type: schema.TypeString,
Required: true,
ForceNew: true,
DefaultFunc: schema.EnvDefaultFunc("OS_REGION_NAME", ""),
2015-02-03 20:56:13 +01:00
},
"name": &schema.Schema{
Type: schema.TypeString,
Optional: true,
},
"description": &schema.Schema{
Type: schema.TypeString,
Optional: true,
},
"audited": &schema.Schema{
Type: schema.TypeBool,
Optional: true,
Default: false,
},
"shared": &schema.Schema{
Type: schema.TypeBool,
Optional: true,
},
"tenant_id": &schema.Schema{
Type: schema.TypeString,
Optional: true,
ForceNew: true,
2015-05-10 06:38:36 +02:00
Computed: true,
},
2015-02-03 20:56:13 +01:00
"rules": &schema.Schema{
Type: schema.TypeList,
2015-02-03 20:56:13 +01:00
Optional: true,
Elem: &schema.Schema{Type: schema.TypeString},
},
},
}
}
func resourceFWPolicyV1Create(d *schema.ResourceData, meta interface{}) error {
2015-02-03 20:56:13 +01:00
config := meta.(*Config)
networkingClient, err := config.networkingV2Client(d.Get("region").(string))
if err != nil {
return fmt.Errorf("Error creating OpenStack networking client: %s", err)
}
v := d.Get("rules").([]interface{})
2015-02-03 20:56:13 +01:00
log.Printf("[DEBUG] Rules found : %#v", v)
log.Printf("[DEBUG] Rules count : %d", len(v))
2015-02-03 20:56:13 +01:00
rules := make([]string, len(v))
for i, v := range v {
2015-02-03 20:56:13 +01:00
rules[i] = v.(string)
}
audited := d.Get("audited").(bool)
2015-02-03 20:56:13 +01:00
opts := policies.CreateOpts{
Name: d.Get("name").(string),
Description: d.Get("description").(string),
Audited: &audited,
TenantID: d.Get("tenant_id").(string),
Rules: rules,
2015-02-03 20:56:13 +01:00
}
if r, ok := d.GetOk("shared"); ok {
shared := r.(bool)
opts.Shared = &shared
}
2015-02-03 20:56:13 +01:00
log.Printf("[DEBUG] Create firewall policy: %#v", opts)
policy, err := policies.Create(networkingClient, opts).Extract()
if err != nil {
return err
}
2015-03-24 13:59:55 +01:00
log.Printf("[DEBUG] Firewall policy created: %#v", policy)
2015-02-03 20:56:13 +01:00
d.SetId(policy.ID)
return resourceFWPolicyV1Read(d, meta)
2015-02-03 20:56:13 +01:00
}
func resourceFWPolicyV1Read(d *schema.ResourceData, meta interface{}) error {
2015-02-03 20:56:13 +01:00
log.Printf("[DEBUG] Retrieve information about firewall policy: %s", d.Id())
config := meta.(*Config)
networkingClient, err := config.networkingV2Client(d.Get("region").(string))
if err != nil {
return fmt.Errorf("Error creating OpenStack networking client: %s", err)
}
policy, err := policies.Get(networkingClient, d.Id()).Extract()
if err != nil {
return CheckDeleted(d, err, "FW policy")
2015-02-03 20:56:13 +01:00
}
log.Printf("[DEBUG] Read OpenStack Firewall Policy %s: %#v", d.Id(), policy)
2015-03-24 13:59:55 +01:00
d.Set("name", policy.Name)
d.Set("description", policy.Description)
d.Set("shared", policy.Shared)
d.Set("audited", policy.Audited)
d.Set("tenant_id", policy.TenantID)
d.Set("rules", policy.Rules)
2015-02-03 20:56:13 +01:00
return nil
}
func resourceFWPolicyV1Update(d *schema.ResourceData, meta interface{}) error {
2015-02-03 20:56:13 +01:00
config := meta.(*Config)
networkingClient, err := config.networkingV2Client(d.Get("region").(string))
if err != nil {
return fmt.Errorf("Error creating OpenStack networking client: %s", err)
}
opts := policies.UpdateOpts{}
if d.HasChange("name") {
opts.Name = d.Get("name").(string)
2015-02-03 20:56:13 +01:00
}
if d.HasChange("description") {
opts.Description = d.Get("description").(string)
2015-02-03 20:56:13 +01:00
}
if d.HasChange("rules") {
v := d.Get("rules").([]interface{})
2015-02-03 20:56:13 +01:00
log.Printf("[DEBUG] Rules found : %#v", v)
log.Printf("[DEBUG] Rules count : %d", len(v))
2015-02-03 20:56:13 +01:00
rules := make([]string, len(v))
for i, v := range v {
2015-02-03 20:56:13 +01:00
rules[i] = v.(string)
}
opts.Rules = rules
}
log.Printf("[DEBUG] Updating firewall policy with id %s: %#v", d.Id(), opts)
err = policies.Update(networkingClient, d.Id(), opts).Err
if err != nil {
return err
}
return resourceFWPolicyV1Read(d, meta)
2015-02-03 20:56:13 +01:00
}
func resourceFWPolicyV1Delete(d *schema.ResourceData, meta interface{}) error {
2015-02-03 20:56:13 +01:00
log.Printf("[DEBUG] Destroy firewall policy: %s", d.Id())
config := meta.(*Config)
networkingClient, err := config.networkingV2Client(d.Get("region").(string))
if err != nil {
return fmt.Errorf("Error creating OpenStack networking client: %s", err)
}
stateConf := &resource.StateChangeConf{
Pending: []string{"ACTIVE"},
Target: []string{"DELETED"},
Refresh: waitForFirewallPolicyDeletion(networkingClient, d.Id()),
Timeout: 120 * time.Second,
Delay: 0,
MinTimeout: 2 * time.Second,
}
2015-02-03 20:56:13 +01:00
if _, err = stateConf.WaitForState(); err != nil {
return err
}
2015-02-03 20:56:13 +01:00
return nil
}
func waitForFirewallPolicyDeletion(networkingClient *gophercloud.ServiceClient, id string) resource.StateRefreshFunc {
return func() (interface{}, string, error) {
err := policies.Delete(networkingClient, id).Err
if err == nil {
return "", "DELETED", nil
2015-02-03 20:56:13 +01:00
}
if errCode, ok := err.(gophercloud.ErrUnexpectedResponseCode); ok {
if errCode.Actual == 409 {
// This error usually means that the policy is attached
// to a firewall. At this point, the firewall is probably
// being delete. So, we retry a few times.
return nil, "ACTIVE", nil
}
}
2015-02-03 20:56:13 +01:00
return nil, "ACTIVE", err
2015-02-03 20:56:13 +01:00
}
}