-
Notifications
You must be signed in to change notification settings - Fork 8
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
250 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,250 @@ | ||
| package interfaces | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "strings" | ||
|
|
||
| "github.com/hashicorp/terraform-plugin-log/tflog" | ||
| "github.com/mitchellh/mapstructure" | ||
| "github.com/netapp/terraform-provider-netapp-ontap/internal/restclient" | ||
| "github.com/netapp/terraform-provider-netapp-ontap/internal/utils" | ||
| ) | ||
|
|
||
| // SecurityCertificateGetDataModelONTAP describes the GET record data model using go types for mapping. | ||
| type SecurityCertificateGetDataModelONTAP struct { | ||
| Name string `mapstructure:"name"` | ||
| UUID string `mapstructure:"uuid"` | ||
| CommonName string `mapstructure:"common_name"` | ||
| SVM svm `mapstructure:"svm"` | ||
| Scope string `mapstructure:"scope"` | ||
| Type string `mapstructure:"type"` | ||
| SerialNumber string `mapstructure:"serial_number"` | ||
| CA string `mapstructure:"ca"` | ||
| HashFunction string `mapstructure:"hash_function"` | ||
| KeySize int64 `mapstructure:"key_size"` | ||
| ExpiryTime string `mapstructure:"expiry_time"` | ||
| PublicCertificate string `mapstructure:"public_certificate"` | ||
| } | ||
|
|
||
| // SignedSecurityCertificateGetDataModelONTAP describes the GET record data model using go types for mapping. | ||
| type SignedSecurityCertificateGetDataModelONTAP struct { | ||
| SignedCertificate string `mapstructure:"public_certificate"` | ||
| } | ||
|
|
||
| // SecurityCertificateResourceCreateBodyDataModelONTAP describes the create/install body data model using go types for mapping. | ||
| type SecurityCertificateResourceCreateBodyDataModelONTAP struct { | ||
| Name string `mapstructure:"name,omitempty"` | ||
| CommonName string `mapstructure:"common_name"` | ||
| Type string `mapstructure:"type"` | ||
| SVM svm `mapstructure:"svm,omitempty"` | ||
| Scope string `mapstructure:"scope,omitempty"` | ||
| PublicCertificate string `mapstructure:"public_certificate,omitempty"` | ||
| PrivateKey string `mapstructure:"private_key,omitempty"` | ||
| HashFunction string `mapstructure:"hash_function,omitempty"` | ||
| KeySize int64 `mapstructure:"key_size,omitempty"` | ||
| ExpiryTime string `mapstructure:"expiry_time,omitempty"` | ||
| } | ||
|
|
||
| // SecurityCertificateResourceSignBodyDataModelONTAP describes the signing body data model using go types for mapping. | ||
| type SecurityCertificateResourceSignBodyDataModelONTAP struct { | ||
| SigningRequest string `mapstructure:"signing_request"` | ||
| HashFunction string `mapstructure:"hash_function,omitempty"` | ||
| ExpiryTime string `mapstructure:"expiry_time,omitempty"` | ||
| } | ||
|
|
||
| // SecurityCertificateDataSourceFilterModel describes the data source data model for queries. | ||
| type SecurityCertificateDataSourceFilterModel struct { | ||
| SVMName string `mapstructure:"svm.name"` | ||
| Scope string `mapstructure:"scope"` | ||
| CommonName string `mapstructure:"common_name"` | ||
| Type string `mapstructure:"type"` | ||
| } | ||
|
|
||
| // GetSecurityCertificate to get security_certificate info | ||
| // Retrieves the certificate with the given name and/or (common name & type) | ||
| func GetSecurityCertificate(errorHandler *utils.ErrorHandler, r restclient.RestClient, version versionModelONTAP, name string, common_name string, type_ string) (*SecurityCertificateGetDataModelONTAP, error) { | ||
| api := "security/certificates" | ||
| query := r.NewQuery() | ||
| if name != "" { | ||
| query.Set("name", name) | ||
| } else { | ||
| query.Set("common_name", common_name) | ||
| query.Set("type", type_) | ||
| } | ||
| var fields = []string{"uuid", "common_name", "svm.name", "scope", "type", "serial_number", "ca", "hash_function", "key_size", "expiry_time", "public_certificate"} | ||
| if version.Generation == 9 && version.Major >= 8 { | ||
| fields = append(fields, "name") | ||
| } | ||
| query.Fields(fields) | ||
|
|
||
| statusCode, response, err := r.GetNilOrOneRecord(api, query, nil) | ||
| if err == nil && response == nil { | ||
| err = fmt.Errorf("no response for GET %s", api) | ||
| } | ||
| if err != nil { | ||
| if strings.Contains(err.Error(), "or more records when only one is expected") { | ||
| return nil, errorHandler.MakeAndReportError("error reading security_certificate info", "Duplicate records found with the same common_name.") | ||
| } | ||
| return nil, errorHandler.MakeAndReportError("error reading security_certificate info", fmt.Sprintf("error on GET %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
|
|
||
| var dataONTAP SecurityCertificateGetDataModelONTAP | ||
| if err := mapstructure.Decode(response, &dataONTAP); err != nil { | ||
| return nil, errorHandler.MakeAndReportError(fmt.Sprintf("failed to decode response from GET %s", api), | ||
| fmt.Sprintf("error: %s, statusCode %d, response %#v", err, statusCode, response)) | ||
| } | ||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("Read security_certificate data source: %#v", dataONTAP)) | ||
| return &dataONTAP, nil | ||
| } | ||
|
|
||
| // GetSecurityCertificateByName to get security_certificate info | ||
| // Retrieves the certificate using its unique name | ||
| func GetSecurityCertificateByName(errorHandler *utils.ErrorHandler, r restclient.RestClient, version versionModelONTAP, name string) (*SecurityCertificateGetDataModelONTAP, error) { | ||
| api := "security/certificates" | ||
| query := r.NewQuery() | ||
| if version.Generation == 9 && version.Major >= 8 { | ||
| query.Add("name", name) | ||
| } else { | ||
| return nil, errorHandler.MakeAndReportError("error reading security_certificate info", "Attribute 'name' requires ONTAP 9.8 or later.") | ||
| } | ||
| query.Fields([]string{"uuid", "name", "common_name", "svm.name", "scope", "type", "serial_number", "ca", "hash_function", "key_size", "expiry_time", "public_certificate"}) | ||
|
|
||
| statusCode, response, err := r.GetNilOrOneRecord(api, query, nil) | ||
| if err == nil && response == nil { | ||
| err = fmt.Errorf("no response for GET %s", api) | ||
| } | ||
| if err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error reading security_certificate info", fmt.Sprintf("error on GET %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
|
|
||
| var dataONTAP SecurityCertificateGetDataModelONTAP | ||
| if err := mapstructure.Decode(response, &dataONTAP); err != nil { | ||
| return nil, errorHandler.MakeAndReportError(fmt.Sprintf("failed to decode response from GET %s", api), | ||
| fmt.Sprintf("error: %s, statusCode %d, response %#v", err, statusCode, response)) | ||
| } | ||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("Read security_certificate data source: %#v", dataONTAP)) | ||
| return &dataONTAP, nil | ||
| } | ||
|
|
||
| // GetSecurityCertificateByUUID to get security_certificate info | ||
| // Retrieves the certificate using its UUID | ||
| func GetSecurityCertificateByUUID(errorHandler *utils.ErrorHandler, r restclient.RestClient, version versionModelONTAP, uuid string) (*SecurityCertificateGetDataModelONTAP, error) { | ||
| api := "security/certificates/" + uuid | ||
| query := r.NewQuery() | ||
| var fields = []string{"uuid", "common_name", "svm.name", "scope", "type", "serial_number", "ca", "hash_function", "key_size", "expiry_time", "public_certificate"} | ||
| if version.Generation == 9 && version.Major >= 8 { | ||
| fields = append(fields, "name") | ||
| } | ||
| query.Fields(fields) | ||
| statusCode, response, err := r.GetNilOrOneRecord(api, query, nil) | ||
| if err == nil && response == nil { | ||
| err = fmt.Errorf("no response for GET %s", api) | ||
| } | ||
| if err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error reading security_certificate info", fmt.Sprintf("error on GET %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
|
|
||
| var dataONTAP SecurityCertificateGetDataModelONTAP | ||
| if err := mapstructure.Decode(response, &dataONTAP); err != nil { | ||
| return nil, errorHandler.MakeAndReportError(fmt.Sprintf("failed to decode response from GET %s", api), | ||
| fmt.Sprintf("error: %s, statusCode %d, response %#v", err, statusCode, response)) | ||
| } | ||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("Read security_certificate data source: %#v", dataONTAP)) | ||
| return &dataONTAP, nil | ||
| } | ||
|
|
||
| // GetSecurityCertificates to get security_certificate info for all resources matching a filter | ||
| func GetSecurityCertificates(errorHandler *utils.ErrorHandler, r restclient.RestClient, version versionModelONTAP, filter *SecurityCertificateDataSourceFilterModel) ([]SecurityCertificateGetDataModelONTAP, error) { | ||
| api := "security/certificates" | ||
| query := r.NewQuery() | ||
| var fields = []string{"uuid", "common_name", "svm.name", "scope", "type", "serial_number", "ca", "hash_function", "key_size", "expiry_time", "public_certificate"} | ||
| if version.Generation == 9 && version.Major >= 8 { | ||
| fields = append(fields, "name") | ||
| } | ||
| query.Fields(fields) | ||
|
|
||
| if filter != nil { | ||
| var filterMap map[string]interface{} | ||
| if err := mapstructure.Decode(filter, &filterMap); err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error encoding security_certificates filter info", fmt.Sprintf("error on filter %#v: %s", filter, err)) | ||
| } | ||
| query.SetValues(filterMap) | ||
| } | ||
|
|
||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("security certificates filter: %+v", query)) | ||
| statusCode, response, err := r.GetZeroOrMoreRecords(api, query, nil) | ||
| if err == nil && response == nil { | ||
| err = fmt.Errorf("no response for GET %s", api) | ||
| } | ||
| if err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error reading security_certificates info", fmt.Sprintf("error on GET %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
|
|
||
| var dataONTAP []SecurityCertificateGetDataModelONTAP | ||
| for _, info := range response { | ||
| var record SecurityCertificateGetDataModelONTAP | ||
| if err := mapstructure.Decode(info, &record); err != nil { | ||
| return nil, errorHandler.MakeAndReportError(fmt.Sprintf("failed to decode response from GET %s", api), | ||
| fmt.Sprintf("error: %s, statusCode %d, info %#v", err, statusCode, info)) | ||
| } | ||
| dataONTAP = append(dataONTAP, record) | ||
| } | ||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("Read security_certificates data source: %#v", dataONTAP)) | ||
| return dataONTAP, nil | ||
| } | ||
|
|
||
| // CreateOrInstallSecurityCertificate to create/ install a security certificate | ||
| func CreateOrInstallSecurityCertificate(errorHandler *utils.ErrorHandler, r restclient.RestClient, body SecurityCertificateResourceCreateBodyDataModelONTAP, operation string) (*SecurityCertificateGetDataModelONTAP, error) { | ||
| api := "security/certificates" | ||
| var bodyMap map[string]interface{} | ||
| if err := mapstructure.Decode(body, &bodyMap); err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error encoding security certificate body", fmt.Sprintf("error on encoding %s body: %s, body: %#v", api, err, body)) | ||
| } | ||
| query := r.NewQuery() | ||
| query.Add("return_records", "true") | ||
|
|
||
| statusCode, response, err := r.CallCreateMethod(api, query, bodyMap) | ||
| if err != nil { | ||
| return nil, errorHandler.MakeAndReportError(fmt.Sprintf("error %s security certificate", operation), fmt.Sprintf("error on POST %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
|
|
||
| var dataONTAP SecurityCertificateGetDataModelONTAP | ||
| if err := mapstructure.Decode(response.Records[0], &dataONTAP); err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error decoding security certificate info", fmt.Sprintf("error on decode storage/security_certificatess info: %s, statusCode %d, response %#v", err, statusCode, response)) | ||
| } | ||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("Created security certificate: %#v", dataONTAP)) | ||
| return &dataONTAP, nil | ||
| } | ||
|
|
||
| // SignSecurityCertificate to sign a security_certificate | ||
| func SignSecurityCertificate(errorHandler *utils.ErrorHandler, r restclient.RestClient, uuid string, body SecurityCertificateResourceSignBodyDataModelONTAP) (*SignedSecurityCertificateGetDataModelONTAP, error) { | ||
| api := "security/certificates" | ||
| var bodyMap map[string]interface{} | ||
| if err := mapstructure.Decode(body, &bodyMap); err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error encoding security certificate body", fmt.Sprintf("error on encoding %s body: %s, body: %#v", api, err, body)) | ||
| } | ||
| query := r.NewQuery() | ||
| query.Add("return_records", "true") | ||
|
|
||
| statusCode, response, err := r.CallCreateMethod(api+"/"+uuid+"/sign", query, bodyMap) | ||
| if err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error signing security certificate", fmt.Sprintf("error on POST %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
|
|
||
| var dataONTAP SignedSecurityCertificateGetDataModelONTAP | ||
| if err := mapstructure.Decode(response.Records[0], &dataONTAP); err != nil { | ||
| return nil, errorHandler.MakeAndReportError("error decoding signed security certificate info", fmt.Sprintf("error on decode storage/security_certificatess/{ca.uuid}/sign info: %s, statusCode %d, response %#v", err, statusCode, response)) | ||
| } | ||
| tflog.Debug(errorHandler.Ctx, fmt.Sprintf("Signed security certificate: %#v", dataONTAP)) | ||
| return &dataONTAP, nil | ||
| } | ||
|
|
||
| // DeleteSecurityCertificate to delete a security_certificate | ||
| func DeleteSecurityCertificate(errorHandler *utils.ErrorHandler, r restclient.RestClient, uuid string) error { | ||
| api := "security/certificates" | ||
| statusCode, _, err := r.CallDeleteMethod(api+"/"+uuid, nil, nil) | ||
| if err != nil { | ||
| return errorHandler.MakeAndReportError("error deleting security certificate", fmt.Sprintf("error on DELETE %s: %s, statusCode %d", api, err, statusCode)) | ||
| } | ||
| return nil | ||
| } |