138 new resource security certificate

[csahu9]

Issue 138

[carchi8py]

@csahu9 is name returned back in the output for 9.6 and 9.7

If not this code won't work for those system as name is required but would be null.

[csahu9]

@csahu9 is name returned back in the output for 9.6 and 9.7

If not this code won't work for those system as name is required but would be null.

@carchi8py Resource Read has version constraints before adding name to query fields, so it won't be returned for Ontap 9.6/9/7
I've updated the error reporting for scenario where one tries to use name in Ontap 9.6/9.7
I've now tested the resource in Ontap 9.6 as well and it is working as expected.

[chuyich]

There is one case with minimum setup and the creation has issues:

resource "netapp-ontap_security_certificate" "create_certificate" {
  cx_profile_name = "cluster5"
  common_name     = "tfsvm_ca_cert_test"
  type            = "root_ca"
}

But creating a certificate without svm info is allowed.

csahu-vsim34::security certificate> create -common-name "ttt" -type root-ca -size 2048

The certificate's generated name for reference: ttt_17FCEF1EB6BDE792_ttt

csahu-vsim34::security certificate> show -cert-name ttt_17FCEF1EB6BDE792_ttt
Vserver    Serial Number   Certificate Name                       Type
---------- --------------- -------------------------------------- ------------
csahu-vsim34 
           17FCEF1EB6BDE792 
                           ttt_17FCEF1EB6BDE792_ttt               root-ca
    Certificate Authority: ttt
          Expiration Date: Thu Oct 09 20:14:32 2025

So svm_name is optional and computed in the schema definition.

Please take a look and adjust the code for taking care of this case.

[csahu9]

There is one case with minimum setup and the creation has issues:

resource "netapp-ontap_security_certificate" "create_certificate" {
  cx_profile_name = "cluster5"
  common_name     = "tfsvm_ca_cert_test"
  type            = "root_ca"
}

But creating a certificate without svm info is allowed.

csahu-vsim34::security certificate> create -common-name "ttt" -type root-ca -size 2048

The certificate's generated name for reference: ttt_17FCEF1EB6BDE792_ttt

csahu-vsim34::security certificate> show -cert-name ttt_17FCEF1EB6BDE792_ttt
Vserver    Serial Number   Certificate Name                       Type
---------- --------------- -------------------------------------- ------------
csahu-vsim34 
           17FCEF1EB6BDE792 
                           ttt_17FCEF1EB6BDE792_ttt               root-ca
    Certificate Authority: ttt
          Expiration Date: Thu Oct 09 20:14:32 2025

So svm_name is optional and computed in the schema definition.

Please take a look and adjust the code for taking care of this case.

@chuyich thanks for pointing this out; I've updated the resource accordingly.

[chuyich]

Just want to make sure if you check the fsx is supported or not.

[csahu9]

No, @chuyich , I haven't tested for fsx support.
Could you please let me know the steps that are required to test the same?

[chuyich]

Please check the slack message.