feat: add project API key resource

metal/resource_metal_project_api_key.go

@@ -0,0 +1,105 @@
+package metal
+
+import (
+	"log"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+	"github.com/packethost/packngo"
+)
+
+func metalProjectAPIKey() map[string]*schema.Schema {
+	return map[string]*schema.Schema{
+		"project_id": {
+			Type:     schema.TypeString,
+			ForceNew: true,
+			Required: true,
+		},
+		"read_only": {
+			Type:     schema.TypeBool,
+			Default:  true,
+			ForceNew: true,
+			Optional: true,
+		},
+		"description": {
+			Type:     schema.TypeString,
+			Required: true,
+		},
+	}
+}
+
+func resourceMetalProjectAPIKey() *schema.Resource {
+	return &schema.Resource{
+		Create: resourceMetalProjectAPIKeyCreate,
+		Read:   resourceMetalProjectAPIKeyRead,
+		Update: resourceMetalProjectAPIKeyUpdate,
+		Delete: resourceMetalProjectAPIKeyDelete,
+		Importer: &schema.ResourceImporter{
+			State: schema.ImportStatePassthrough,
+		},
+
+		Schema: metalProjectAPIKey(),
+	}
+}
+
+func resourceMetalProjectAPIKeyCreate(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*packngo.Client)
+
+	createRequest := &packngo.APIKeyCreateRequest{
+		ProjectID:   d.Get("project_id").(string),
+		ReadOnly:    d.Get("read_only").(bool),
+		Description: d.Get("description").(string),
+	}
+
+	apiKey, _, err := client.APIKeys.Create(createRequest)
+	if err != nil {
+		return friendlyError(err)
+	}
+
+	d.SetId(apiKey.ID)
+
+	return resourceMetalProjectAPIKeyRead(d, meta)
+}
+
+func resourceMetalProjectAPIKeyRead(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*packngo.Client)
+
+	apiKey, err := client.APIKeys.ProjectGet(d.Id(), d.Get("project_id").(string), nil)
+	if err != nil {
+		err = friendlyError(err)
+
+		// If the key is somehow already destroyed, mark as
+		// succesfully gone
+		if isNotFound(err) {
+			log.Printf("[WARN] Project APIKey (%s) not found, removing from state", d.Id())
+			d.SetId("")
+			return nil
+		}
+
+		return err
+	}
+
+	d.SetId(apiKey.ID)
+	d.Set("project_id", apiKey.Project.ID)
+	d.Set("description", apiKey.Description)
+	d.Set("read_only", apiKey.ReadOnly)
+	d.Set("created", apiKey.Created)
+	d.Set("updated", apiKey.Updated)
+
+	return nil
+}
+
+func resourceMetalProjectAPIKeyUpdate(d *schema.ResourceData, meta interface{}) error {
+	return resourceMetalProjectAPIKeyRead(d, meta)
+}
+
+func resourceMetalProjectAPIKeyDelete(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*packngo.Client)
+
+	resp, err := client.APIKeys.Delete(d.Id())
+	if ignoreResponseErrors(httpForbidden, httpNotFound)(resp, err) != nil {
+		return friendlyError(err)
+	}
+
+	d.SetId("")
+	return nil
+}

metal/resource_metal_project_api_key_test.go

@@ -0,0 +1,109 @@
+package metal
+
+import (
+	"fmt"
+	"testing"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/acctest"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
+	"github.com/packethost/packngo"
+)
+
+func metalProjectAPIKeyConfig_Basic(description string) string {
+	return fmt.Sprintf(`
+resource "metal_project" "test" {
+    name = "tfacc-project_api_key-%s"
+}
+
+resource "metal_project_api_key" "test-ro" {
+    description = "tfacc-project-api-key-ro-test"
+    project_id = "${metal_project.test.id}"
+}
+
+resource "metal_project_api_key" "test-rw" {
+    description = "tfacc-project-api-key-rw-test"
+	read_only = false
+    project_id = "${metal_project.test.id}"
+}
+`, description)
+}
+
+func TestAccMetalProjectAPIKey_Basic(t *testing.T) {
+	rs := acctest.RandString(10)
+	var key packngo.APIKey
+
+	cfg := metalProjectAPIKeyConfig_Basic(rs)
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:     func() { testAccPreCheck(t) },
+		Providers:    testAccProviders,
+		CheckDestroy: testAccCheckMetalProjectAPIKeyDestroy,
+		Steps: []resource.TestStep{
+			{
+				Config: cfg,
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckMetalProjectAPIKeyExists("metal_project_api_key.test-ro", &key),
+					resource.TestCheckResourceAttr(
+						"metal_project_api_key.test", "read_only", "true"),
+					resource.TestCheckResourceAttr(
+						"metal_project_api_key.test", "description", "tfacc-project-api-key-ro-test"),
+				),
+			},
+			{
+				Config: cfg,
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckMetalProjectAPIKeyExists("metal_project_api_key.test-rw", &key),
+					resource.TestCheckResourceAttr(
+						"metal_project_api_key.test", "read_only", "false"),
+					resource.TestCheckResourceAttr(
+						"metal_project_api_key.test", "description", "tfacc-project-api-key-rw-test"),
+				),
+			},
+		},
+	})
+}
+
+func testAccCheckMetalProjectAPIKeyDestroy(s *terraform.State) error {
+	client := testAccProvider.Meta().(*packngo.Client)
+
+	for _, rs := range s.RootModule().Resources {
+		if rs.Type != "metal_project_api_key" {
+			continue
+		}
+
+		if _, err := client.APIKeys.ProjectGet(rs.Primary.Attributes["project_id"], rs.Primary.ID, nil); err == nil {
+			return fmt.Errorf("Project API key still exists")
+		}
+	}
+
+	return nil
+}
+
+func testAccCheckMetalProjectAPIKeyExists(n string, key *packngo.APIKey) resource.TestCheckFunc {
+	return func(s *terraform.State) error {
+		rs, ok := s.RootModule().Resources[n]
+		if !ok {
+			return fmt.Errorf("Not found: %s", n)
+		}
+
+		if rs.Primary.ID == "" {
+			return fmt.Errorf("No Record ID is set")
+		}
+
+		client := testAccProvider.Meta().(*packngo.Client)
+
+		foundAPIKey, err := client.APIKeys.ProjectGet(key.Project.ID, rs.Primary.ID, nil)
+		if err != nil {
+			return err
+		}
+
+		if foundAPIKey.ID != rs.Primary.ID {
+			return fmt.Errorf("Project API Key not found: %v - %v", rs.Primary.ID, foundAPIKey.ID)
+		}
+
+		*key = *foundAPIKey
+
+		return nil
+	}
+}