feat: Add support for infrastructure stacks

.github/workflows/test.yml

@@ -4,6 +4,8 @@ on:
     paths-ignore:
       - 'README.md'
   push:
+    branches:
+      - "main"
     paths-ignore:
       - 'README.md'
 permissions:

docs/resources/cluster.md

@@ -138,7 +138,7 @@ Required:
 Optional:
 
 - `args` (List of String) Arguments to pass to the command when executing it.
-- `env` (Map of String) Defines  environment variables to expose to the process.
+- `env` (Map of String) Defines environment variables to expose to the process.
 
 
 
@@ -186,7 +186,7 @@ Required:
 Optional:
 
 - `args` (List of String) Arguments to pass to the command when executing it.
-- `env` (Map of String) Defines  environment variables to expose to the process.
+- `env` (Map of String) Defines environment variables to expose to the process.
 
 
 

docs/resources/infrastructure_stack.md

@@ -0,0 +1,137 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "plural_infrastructure_stack Resource - terraform-provider-plural"
+subcategory: ""
+description: |-
+
+---
+
+# plural_infrastructure_stack (Resource)
+
+
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `cluster_id` (String) The cluster on which the stack will be applied.
+- `configuration` (Attributes) Stack configuration. (see [below for nested schema](#nestedatt--configuration))
+- `name` (String) Human-readable name of this stack.
+- `repository` (Attributes) Repository information used to pull stack. (see [below for nested schema](#nestedatt--repository))
+- `type` (String) A type for the stack, specifies the tool to use to apply it. Allowed values include `ANSIBLE` and `TERRAFORM`.
+
+### Optional
+
+- `approval` (Boolean) Determines whether to require approval.
+- `bindings` (Attributes) Read and write policies of this stack. (see [below for nested schema](#nestedatt--bindings))
+- `detach` (Boolean) Determines behavior during resource destruction, if true it will detach resource instead of deleting it.
+- `environment` (Attributes Set) Defines environment variables for the stack. (see [below for nested schema](#nestedatt--environment))
+- `files` (Map of String) File path-content map.
+- `job_spec` (Attributes) Repository information used to pull stack. (see [below for nested schema](#nestedatt--job_spec))
+
+### Read-Only
+
+- `id` (String) Internal identifier of this stack.
+
+<a id="nestedatt--configuration"></a>
+### Nested Schema for `configuration`
+
+Required:
+
+- `version` (String) The semver of the tool you wish to use.
+
+Optional:
+
+- `image` (String) Optional custom image you might want to use.
+
+
+<a id="nestedatt--repository"></a>
+### Nested Schema for `repository`
+
+Required:
+
+- `folder` (String) The folder where manifests live.
+- `id` (String) ID of the repository to pull from.
+- `ref` (String) A general git ref, either a branch name or commit sha understandable by "git checkout <ref>".
+
+
+<a id="nestedatt--bindings"></a>
+### Nested Schema for `bindings`
+
+Optional:
+
+- `read` (Attributes Set) Read policies of this stack. (see [below for nested schema](#nestedatt--bindings--read))
+- `write` (Attributes Set) Write policies of this stack. (see [below for nested schema](#nestedatt--bindings--write))
+
+<a id="nestedatt--bindings--read"></a>
+### Nested Schema for `bindings.read`
+
+Optional:
+
+- `group_id` (String)
+- `id` (String)
+- `user_id` (String)
+
+
+<a id="nestedatt--bindings--write"></a>
+### Nested Schema for `bindings.write`
+
+Optional:
+
+- `group_id` (String)
+- `id` (String)
+- `user_id` (String)
+
+
+
+<a id="nestedatt--environment"></a>
+### Nested Schema for `environment`
+
+Required:
+
+- `name` (String) Environment variable name.
+- `value` (String) Environment variable value.
+
+Optional:
+
+- `secret` (Boolean) Indicates if environment variable is secret.
+
+
+<a id="nestedatt--job_spec"></a>
+### Nested Schema for `job_spec`
+
+Required:
+
+- `namespace` (String) Namespace where job will be deployed.
+
+Optional:
+
+- `annotations` (Map of String) Kubernetes annotations applied to the job.
+- `containers` (Attributes Set) (see [below for nested schema](#nestedatt--job_spec--containers))
+- `labels` (Map of String) Kubernetes labels applied to the job.
+- `raw` (String) If you'd rather define the job spec via straight Kubernetes YAML.
+- `service_account` (String) Kubernetes service account for this job.
+
+<a id="nestedatt--job_spec--containers"></a>
+### Nested Schema for `job_spec.containers`
+
+Required:
+
+- `image` (String)
+
+Optional:
+
+- `args` (List of String) Arguments to pass to the command when executing it.
+- `env` (Map of String) Defines environment variables to expose to the process.
+- `env_from` (Attributes Set) (see [below for nested schema](#nestedatt--job_spec--containers--env_from))
+
+<a id="nestedatt--job_spec--containers--env_from"></a>
+### Nested Schema for `job_spec.containers.env_from`
+
+Required:
+
+- `config_map` (String)
+- `secret` (String)

example/byok/main.tf → example/cluster/byok/main.tf

@@ -21,9 +21,9 @@ resource "plural_cluster" "byok" {
   metadata = jsonencode({
     test1 = "test"
     test2 = false
-    test3 = jsonencode({
+    test3 = {
       abc = false
-    })
+    }
   })
   helm_repo_url = "https://pluralsh.github.io/deployment-operator"
   tags = {

example/stack/main.tf

@@ -0,0 +1,162 @@
+terraform {
+  required_providers {
+    plural = {
+      source  = "pluralsh/plural"
+      version = "0.0.1"
+    }
+  }
+}
+
+provider "plural" {
+  use_cli = true
+}
+
+data "plural_cluster" "cluster" {
+  handle = "mgmt"
+}
+
+data "plural_git_repository" "repository" {
+  url = "https://github.com/zreigz/tf-hello.git"
+}
+
+resource "random_string" "random" {
+  length  = 5
+  upper   = false
+  special = false
+}
+
+resource "plural_infrastructure_stack" "stack-full" {
+  name       = "stack-tf-full-${random_string.random.result}"
+  type       = "TERRAFORM"
+  approval   = true
+  detach     = true
+  cluster_id = data.plural_cluster.cluster.id
+  repository = {
+    id     = data.plural_git_repository.repository.id
+    ref    = "main"
+    folder = "terraform"
+  }
+  configuration = {
+    image   = "hashicorp/terraform:1.8.1"
+    version = "1.8.1"
+  }
+  files = {
+    "test.yml" = "value: 123"
+  }
+  environment = [
+    {
+      name  = "USERNAME"
+      value = "joe"
+    },
+    {
+      name   = "PASSWORD"
+      value  = "test"
+      secret = true
+    }
+  ]
+  job_spec = {
+    namespace = "default"
+    labels = {
+      test = "123"
+    }
+    service_account = "default"
+    containers      = [
+      {
+        image    = "perl:5.34.0"
+        args     = ["perl", "-Mbignum=bpi", "-wle", "print bpi(2000)"]
+        env = {}
+        env_from = []
+      }
+    ]
+  }
+  bindings = {
+    read  = []
+    write = []
+  }
+}
+
+resource "plural_infrastructure_stack" "stack-raw" {
+  name       = "stack-tf-raw-${random_string.random.result}"
+  type       = "TERRAFORM"
+  approval   = true
+  detach     = true
+  cluster_id = data.plural_cluster.cluster.id
+  repository = {
+    id     = data.plural_git_repository.repository.id
+    ref    = "main"
+    folder = "terraform"
+  }
+  configuration = {
+    image   = "hashicorp/terraform:1.8.1"
+    version = "1.8.1"
+  }
+  files = {
+    "test.yml" = "value: 123"
+  }
+  environment = [
+    {
+      name  = "USERNAME"
+      value = "joe"
+    },
+    {
+      name   = "PASSWORD"
+      value  = "test"
+      secret = true
+    }
+  ]
+  job_spec = {
+    namespace = "default"
+    raw       = yamlencode({
+      containers = [
+        {
+          name    = "pi"
+          image   = "perl:5.34.0"
+          command = ["perl", "-Mbignum=bpi", "-wle", "print bpi(2000)"]
+        }
+      ]
+      restartPolicy = "Never"
+    })
+  }
+  bindings = {
+    read  = []
+    write = []
+  }
+}
+
+resource "plural_infrastructure_stack" "stack-empty" {
+  name       = "stack-tf-empty-${random_string.random.result}"
+  type       = "TERRAFORM"
+  approval   = true
+  detach     = true
+  cluster_id = data.plural_cluster.cluster.id
+  repository = {
+    id     = data.plural_git_repository.repository.id
+    ref    = "main"
+    folder = "terraform"
+  }
+  configuration = {
+    version = "1.8.1"
+  }
+  files = {}
+  environment = []
+  job_spec = {
+    namespace = "default"
+    raw       = yamlencode({ test = true })
+  }
+  bindings = {}
+}
+
+resource "plural_infrastructure_stack" "stack-minimal" {
+  name       = "stack-tf-minimal-${random_string.random.result}"
+  type       = "TERRAFORM"
+  detach     = true
+  cluster_id = data.plural_cluster.cluster.id
+  repository = {
+    id     = data.plural_git_repository.repository.id
+    ref    = "main"
+    folder = "terraform"
+  }
+  configuration = {
+    version = "1.8.1"
+  }
+}

go.mod

@@ -12,13 +12,14 @@ require (
 	github.com/hashicorp/terraform-plugin-framework-validators v0.12.0
 	github.com/hashicorp/terraform-plugin-log v0.9.0
 	github.com/mitchellh/go-homedir v1.1.0
-	github.com/pluralsh/console-client-go v0.1.17
+	github.com/pluralsh/console-client-go v0.4.0
 	github.com/pluralsh/plural-cli v0.8.5-0.20240216094552-efc34ee6de37
 	github.com/pluralsh/polly v0.1.7
 	github.com/samber/lo v1.38.1
 	github.com/sirupsen/logrus v1.9.3
 	gopkg.in/yaml.v2 v2.4.0
 	helm.sh/helm/v3 v3.11.2
+	k8s.io/api v0.26.4
 	k8s.io/apimachinery v0.26.4
 	k8s.io/client-go v0.26.4
 	sigs.k8s.io/yaml v1.3.0
@@ -335,7 +336,6 @@ require (
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	honnef.co/go/tools v0.4.6 // indirect
-	k8s.io/api v0.26.4 // indirect
 	k8s.io/apiextensions-apiserver v0.26.1 // indirect
 	k8s.io/apiserver v0.26.1 // indirect
 	k8s.io/cli-runtime v0.26.1 // indirect

go.sum

@@ -856,8 +856,8 @@ github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/sftp v1.10.1/go.mod h1:lYOWFsE0bwd1+KfKJaKeuokY15vzFx25BLbzYYoAxZI=
 github.com/pkg/sftp v1.13.1/go.mod h1:3HaPG6Dq1ILlpPZRO0HVMrsydcdLt6HRDccSgb87qRg=
-github.com/pluralsh/console-client-go v0.1.17 h1:QMtnWdRvV13/sND/CFjFBUR8nyg3JJgwXReSyM6bK7A=
-github.com/pluralsh/console-client-go v0.1.17/go.mod h1:eyCiLA44YbXiYyJh8303jk5JdPkt9McgCo5kBjk4lKo=
+github.com/pluralsh/console-client-go v0.4.0 h1:lgKaVGi8jB7S8wFF6L3P6H/4Xc88e4FozhyW58O1w3Q=
+github.com/pluralsh/console-client-go v0.4.0/go.mod h1:eyCiLA44YbXiYyJh8303jk5JdPkt9McgCo5kBjk4lKo=
 github.com/pluralsh/gqlclient v1.11.0 h1:FfXW7FiEJLHOfTAa7NxDb8jb3aMZNIpCAcG+bg8uHYA=
 github.com/pluralsh/gqlclient v1.11.0/go.mod h1:qSXKUlio1F2DRPy8el4oFYsmpKbkUYspgPB87T4it5I=
 github.com/pluralsh/plural-cli v0.8.5-0.20240216094552-efc34ee6de37 h1:DBnaKvKmbTbKwbkrh/2gJBwyHYfaXdxeT3UGh+94K4g=