support digicert resource

Author: tuvia-akeyless

akeyless/provider.go

@@ -168,6 +168,7 @@ func Provider() *schema.Provider {
 			"akeyless_target_aws":                                                resourceAwsTarget(),
 			"akeyless_target_azure":                                              resourceAzureTarget(),
 			"akeyless_target_db":                                                 resourceDbTarget(),
+			"akeyless_target_digicert":                                           resourceDigicertTarget(),
 			"akeyless_target_dockerhub":                                          resourceDockerhubTarget(),
 			"akeyless_target_eks":                                                resourceEksTarget(),
 			"akeyless_target_gcp":                                                resourceGcpTarget(),
@@ -475,7 +476,7 @@ func getLoginWithValidation(d *schema.ResourceData) (interface{}, loginType, err
 	return nil, "", fmt.Errorf("please choose supported login method: api_key_login/password_login/aws_iam_login/gcp_login/azure_ad_login/jwt_login/uid_login/cert_login/token_login")
 }
 
-func getProviderClient(ctx context.Context, d *schema.ResourceData) *akeyless_api.V2ApiService {
+func getProviderClient(_ context.Context, d *schema.ResourceData) *akeyless_api.V2ApiService {
 	apiGwAddress := d.Get("api_gateway_address").(string)
 
 	httpClient := &http.Client{

akeyless/resource_target_digicert.go

@@ -0,0 +1,350 @@
+// generated file
+package akeyless
+
+import (
+	"context"
+
+	akeyless_api "github.com/akeylesslabs/akeyless-go/v5"
+	"github.com/akeylesslabs/terraform-provider-akeyless/akeyless/common"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+)
+
+func resourceDigicertTarget() *schema.Resource {
+	return &schema.Resource{
+		Description: "DigiCert Target resource",
+		Create:      resourceDigicertTargetCreate,
+		Read:        resourceDigicertTargetRead,
+		Update:      resourceDigicertTargetUpdate,
+		Delete:      resourceDigicertTargetDelete,
+		Importer: &schema.ResourceImporter{
+			State: resourceDigicertTargetImport,
+		},
+		Schema: map[string]*schema.Schema{
+			"name": {
+				Type:        schema.TypeString,
+				Required:    true,
+				Description: "Target name",
+				ForceNew:    true,
+			},
+			"email": {
+				Type:        schema.TypeString,
+				Required:    true,
+				Description: "Email address for ACME account registration",
+			},
+			"acme_challenge": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "ACME challenge type. Options: [dns]",
+				Default:     "dns",
+			},
+			"digicert_url": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "DigiCert ACME endpoint selector. Options: [us-production/eu-production/us-demo/eu-demo]",
+				Default:     "us-production",
+			},
+			"dns_target_creds": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP",
+			},
+			"eab_hmac_key": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Sensitive:   true,
+				Description: "External Account Binding HMAC key (required for ACME account bootstrap on create)",
+			},
+			"eab_key_id": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "External Account Binding key identifier (required for ACME account bootstrap on create)",
+			},
+			"gcp_project": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "GCP Cloud DNS project ID. Optional and can be derived from service account",
+			},
+			"hosted_zone": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "AWS Route53 hosted zone ID. Required when DNS credentials target is AWS",
+			},
+			"resource_group": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "Azure resource group name. Required when DNS credentials target is Azure",
+			},
+			"timeout": {
+				Type:             schema.TypeString,
+				Optional:         true,
+				DiffSuppressFunc: common.DiffSuppressDuration,
+				Description:      "Timeout for challenge validation",
+				Default:          "5m",
+			},
+			"description": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "Description of the object",
+			},
+			"key": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Computed:    true,
+				Description: "The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used)",
+			},
+			"max_versions": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "Set the maximum number of versions, limited by the account settings defaults.",
+			},
+			"keep_prev_version": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "Whether to keep previous version [true/false]. If not set, use default according to account settings",
+			},
+		},
+	}
+}
+
+func resourceDigicertTargetCreate(d *schema.ResourceData, m interface{}) error {
+	provider := m.(*providerMeta)
+	client := *provider.client
+	token := *provider.token
+
+	ctx := context.Background()
+	name := d.Get("name").(string)
+	email := d.Get("email").(string)
+	acmeChallenge := d.Get("acme_challenge").(string)
+	digicertUrl := d.Get("digicert_url").(string)
+	dnsTargetCreds := d.Get("dns_target_creds").(string)
+	eabHmacKey := d.Get("eab_hmac_key").(string)
+	eabKeyId := d.Get("eab_key_id").(string)
+	gcpProject := d.Get("gcp_project").(string)
+	hostedZone := d.Get("hosted_zone").(string)
+	resourceGroup := d.Get("resource_group").(string)
+	timeout := d.Get("timeout").(string)
+	description := d.Get("description").(string)
+	key := d.Get("key").(string)
+	maxVersions := d.Get("max_versions").(string)
+
+	body := akeyless_api.TargetCreateDigiCert{
+		Name:  name,
+		Email: email,
+		Token: &token,
+	}
+	common.GetAkeylessPtr(&body.AcmeChallenge, acmeChallenge)
+	common.GetAkeylessPtr(&body.DigicertUrl, digicertUrl)
+	common.GetAkeylessPtr(&body.DnsTargetCreds, dnsTargetCreds)
+	common.GetAkeylessPtr(&body.EabHmacKey, eabHmacKey)
+	common.GetAkeylessPtr(&body.EabKeyId, eabKeyId)
+	common.GetAkeylessPtr(&body.GcpProject, gcpProject)
+	common.GetAkeylessPtr(&body.HostedZone, hostedZone)
+	common.GetAkeylessPtr(&body.ResourceGroup, resourceGroup)
+	common.GetAkeylessPtr(&body.Timeout, timeout)
+	common.GetAkeylessPtr(&body.Description, description)
+	common.GetAkeylessPtr(&body.Key, key)
+	common.GetAkeylessPtr(&body.MaxVersions, maxVersions)
+
+	_, resp, err := client.TargetCreateDigiCert(ctx).Body(body).Execute()
+	if err != nil {
+		return common.HandleError("failed to create target", resp, err)
+	}
+
+	d.SetId(name)
+
+	return nil
+}
+
+func resourceDigicertTargetRead(d *schema.ResourceData, m interface{}) error {
+	provider := m.(*providerMeta)
+	client := *provider.client
+	token := *provider.token
+
+	ctx := context.Background()
+
+	path := d.Id()
+
+	body := akeyless_api.TargetGetDetails{
+		Name:  path,
+		Token: &token,
+	}
+
+	rOut, res, err := client.TargetGetDetails(ctx).Body(body).Execute()
+	if err != nil {
+		return common.HandleReadError(d, "failed to get target details", res, err)
+	}
+
+	if rOut.Value != nil && rOut.Value.DigicertTargetDetails != nil {
+		details := rOut.Value.DigicertTargetDetails
+		if details.Email != nil {
+			err = d.Set("email", *details.Email)
+			if err != nil {
+				return err
+			}
+		}
+		if details.ChallengeType != nil {
+			err = d.Set("acme_challenge", *details.ChallengeType)
+			if err != nil {
+				return err
+			}
+		}
+		if details.DigicertDirectoryType != nil {
+			err = d.Set("digicert_url", *details.DigicertDirectoryType)
+			if err != nil {
+				return err
+			}
+		}
+		if details.DnsTargetName != nil {
+			err = d.Set("dns_target_creds", *details.DnsTargetName)
+			if err != nil {
+				return err
+			}
+		}
+		if details.EabHmacKey != nil {
+			err = d.Set("eab_hmac_key", *details.EabHmacKey)
+			if err != nil {
+				return err
+			}
+		}
+		if details.EabKeyId != nil {
+			err = d.Set("eab_key_id", *details.EabKeyId)
+			if err != nil {
+				return err
+			}
+		}
+		if details.GcpProject != nil {
+			err = d.Set("gcp_project", *details.GcpProject)
+			if err != nil {
+				return err
+			}
+		}
+		if details.HostedZone != nil {
+			err = d.Set("hosted_zone", *details.HostedZone)
+			if err != nil {
+				return err
+			}
+		}
+		if details.ResourceGroup != nil {
+			err = d.Set("resource_group", *details.ResourceGroup)
+			if err != nil {
+				return err
+			}
+		}
+		if details.Timeout != nil {
+			timeout := *details.Timeout
+			duration := common.ConvertNanoSecondsIntoDurationString(timeout)
+			err = d.Set("timeout", duration)
+			if err != nil {
+				return err
+			}
+		}
+	}
+
+	if rOut.Target != nil {
+		if rOut.Target.Comment != nil {
+			err = d.Set("description", *rOut.Target.Comment)
+			if err != nil {
+				return err
+			}
+		}
+		if rOut.Target.ProtectionKeyName != nil {
+			err = d.Set("key", *rOut.Target.ProtectionKeyName)
+			if err != nil {
+				return err
+			}
+		}
+	}
+
+	d.SetId(path)
+
+	return nil
+}
+
+func resourceDigicertTargetUpdate(d *schema.ResourceData, m interface{}) error {
+	provider := m.(*providerMeta)
+	client := *provider.client
+	token := *provider.token
+
+	ctx := context.Background()
+	name := d.Get("name").(string)
+	email := d.Get("email").(string)
+	acmeChallenge := d.Get("acme_challenge").(string)
+	digicertUrl := d.Get("digicert_url").(string)
+	dnsTargetCreds := d.Get("dns_target_creds").(string)
+	eabHmacKey := d.Get("eab_hmac_key").(string)
+	eabKeyId := d.Get("eab_key_id").(string)
+	gcpProject := d.Get("gcp_project").(string)
+	hostedZone := d.Get("hosted_zone").(string)
+	resourceGroup := d.Get("resource_group").(string)
+	timeout := d.Get("timeout").(string)
+	description := d.Get("description").(string)
+	key := d.Get("key").(string)
+	maxVersions := d.Get("max_versions").(string)
+	keepPrevVersion := d.Get("keep_prev_version").(string)
+
+	body := akeyless_api.TargetUpdateDigiCert{
+		Name:  name,
+		Email: email,
+		Token: &token,
+	}
+	common.GetAkeylessPtr(&body.AcmeChallenge, acmeChallenge)
+	common.GetAkeylessPtr(&body.DigicertUrl, digicertUrl)
+	common.GetAkeylessPtr(&body.DnsTargetCreds, dnsTargetCreds)
+	common.GetAkeylessPtr(&body.EabHmacKey, eabHmacKey)
+	common.GetAkeylessPtr(&body.EabKeyId, eabKeyId)
+	common.GetAkeylessPtr(&body.GcpProject, gcpProject)
+	common.GetAkeylessPtr(&body.HostedZone, hostedZone)
+	common.GetAkeylessPtr(&body.ResourceGroup, resourceGroup)
+	common.GetAkeylessPtr(&body.Timeout, timeout)
+	common.GetAkeylessPtr(&body.Description, description)
+	common.GetAkeylessPtr(&body.Key, key)
+	common.GetAkeylessPtr(&body.MaxVersions, maxVersions)
+	common.GetAkeylessPtr(&body.KeepPrevVersion, keepPrevVersion)
+
+	_, resp, err := client.TargetUpdateDigiCert(ctx).Body(body).Execute()
+	if err != nil {
+		return common.HandleError("failed to update target", resp, err)
+	}
+
+	d.SetId(name)
+
+	return nil
+}
+
+func resourceDigicertTargetDelete(d *schema.ResourceData, m interface{}) error {
+	provider := m.(*providerMeta)
+	client := *provider.client
+	token := *provider.token
+
+	path := d.Id()
+
+	deleteItem := akeyless_api.TargetDelete{
+		Token: &token,
+		Name:  path,
+	}
+
+	ctx := context.Background()
+	_, _, err := client.TargetDelete(ctx).Body(deleteItem).Execute()
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func resourceDigicertTargetImport(d *schema.ResourceData, m interface{}) ([]*schema.ResourceData, error) {
+
+	id := d.Id()
+
+	err := resourceDigicertTargetRead(d, m)
+	if err != nil {
+		return nil, err
+	}
+
+	err = d.Set("name", id)
+	if err != nil {
+		return nil, err
+	}
+
+	return []*schema.ResourceData{d}, nil
+}