feat(CLOUDDEV-420): added disable_port_security option to instance re…

…source

docs/data-sources/floatingip.md

@@ -71,5 +71,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/image.md

@@ -71,5 +71,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/instance.md

@@ -116,5 +116,3 @@ Read-Only:
 
 - `delete_on_termination` (Boolean)
 - `volume_id` (String)
-
-

docs/data-sources/k8s.md

@@ -82,5 +82,3 @@ Read-Only:
 - `node_count` (Number)
 - `stack_id` (String)
 - `uuid` (String)
-
-

docs/data-sources/k8s_client_config.md

@@ -43,5 +43,3 @@ data "edgecenter_k8s_client_config" "cfg" {
 - `client_certificate_data` (String) The client_certificate_data field from k8s config.
 - `client_key_data` (String) The client_key_data field from k8s config.
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/k8s_pool.md

@@ -55,5 +55,3 @@ data "edgecenter_k8s_pool" "pool" {
 - `node_count` (Number) The current number of nodes in the pool.
 - `node_names` (List of String) A list of names of nodes within the pool.
 - `stack_id` (String) The identifier of the underlying infrastructure stack used by this pool.
-
-

docs/data-sources/lblistener.md

@@ -61,5 +61,3 @@ output "view" {
 - `protocol` (String) Available values is 'HTTP', 'HTTPS', 'TCP', 'UDP'
 - `protocol_port` (Number) The port on which the protocol is bound.
 - `provisioning_status` (String) The current provisioning status of the load balancer.
-
-

docs/data-sources/lbpool.md

@@ -87,5 +87,3 @@ Read-Only:
 - `persistence_granularity` (String)
 - `persistence_timeout` (Number)
 - `type` (String)
-
-

docs/data-sources/loadbalancer.md

@@ -79,5 +79,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/loadbalancerv2.md

@@ -67,5 +67,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/network.md

@@ -96,5 +96,3 @@ Read-Only:
 
 - `destination` (String)
 - `nexthop` (String)
-
-

docs/data-sources/project.md

@@ -32,5 +32,3 @@ data "edgecenter_project" "pr" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/region.md

@@ -32,5 +32,3 @@ data "edgecenter_region" "rg" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/reservedfixedip.md

@@ -67,5 +67,3 @@ Read-Only:
 
 - `ip_address` (String)
 - `mac_address` (String)
-
-

docs/data-sources/router.md

@@ -97,5 +97,3 @@ Read-Only:
 
 - `destination` (String)
 - `nexthop` (String)
-
-

docs/data-sources/secret.md

@@ -60,5 +60,3 @@ output "view" {
 - `id` (String) The ID of this resource.
 - `mode` (String) The mode of the encryption algorithm.
 - `status` (String) The current status of the secret.
-
-

docs/data-sources/securitygroup.md

@@ -84,5 +84,3 @@ Read-Only:
 - `protocol` (String)
 - `remote_ip_prefix` (String)
 - `updated_at` (String)
-
-

docs/data-sources/servergroup.md

@@ -63,5 +63,3 @@ Read-Only:
 
 - `instance_id` (String)
 - `instance_name` (String)
-
-

docs/data-sources/storage_s3.md

@@ -38,5 +38,3 @@ data "edgecenter_storage_s3" "example_s3" {
 - `generated_s3_endpoint` (String) A s3 endpoint for new storage resource.
 - `id` (String) The ID of this resource.
 - `location` (String) A location of new storage resource. One of (s-dt2)
-
-

docs/data-sources/storage_s3_bucket.md

@@ -34,5 +34,3 @@ data "edgecenter_storage_s3_bucket" "example_s3_bucket" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/subnet.md

@@ -81,5 +81,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/volume.md

@@ -69,5 +69,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/resources/cdn_origingroup.md

@@ -60,5 +60,3 @@ Optional:
 Read-Only:
 
 - `id` (Number) The ID of this resource.
-
-

docs/resources/cdn_resource.md

@@ -618,5 +618,3 @@ Required:
 Optional:
 
 - `enabled` (Boolean)
-
-

docs/resources/cdn_rule.md

@@ -607,5 +607,3 @@ Required:
 Optional:
 
 - `enabled` (Boolean)
-
-

docs/resources/cdn_sslcert.md

@@ -48,5 +48,3 @@ resource "edgecenter_cdn_sslcert" "cdnopt_cert" {
 - `automated` (Boolean) The way SSL certificate was issued.
 - `has_related_resources` (Boolean) It shows if the SSL certificate is used by a CDN resource.
 - `id` (String) The ID of this resource.
-
-

docs/resources/instance.md

@@ -75,10 +75,11 @@ resource "edgecenter_instance" "instance" {
   }
 
   interface {
-    type            = "subnet"
-    network_id      = edgecenter_network.network.id
-    subnet_id       = edgecenter_subnet.subnet.id
-    security_groups = ["d75db0b2-58f1-4a11-88c6-a932bb897310"]
+    type                   = "subnet"
+    network_id             = edgecenter_network.network.id
+    subnet_id              = edgecenter_subnet.subnet.id
+    security_groups        = ["d75db0b2-58f1-4a11-88c6-a932bb897310"]
+    port_security_disabled = true
   }
 
   metadata_map = {
@@ -199,6 +200,7 @@ Optional:
 - `network_id` (String) Required if type is 'subnet' or 'any_subnet'.
 - `order` (Number) Order of attaching interface
 - `port_id` (String) required if type is  'reserved_fixed_ip'
+- `port_security_disabled` (Boolean)
 - `security_groups` (List of String) list of security group IDs
 - `subnet_id` (String) Required if type is 'subnet'.
 - `type` (String) Available value is 'subnet', 'any_subnet', 'external', 'reserved_fixed_ip'

docs/resources/keypair.md

@@ -46,5 +46,3 @@ output "kp" {
 - `fingerprint` (String) A fingerprint of the SSH public key, used to verify the integrity of the key.
 - `id` (String) The ID of this resource.
 - `sshkey_id` (String) The unique identifier assigned by the provider to the SSH key pair.
-
-

docs/resources/storage_s3.md

@@ -44,5 +44,3 @@ resource "edgecenter_storage_s3" "example_s3" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/resources/storage_s3_bucket.md

@@ -34,5 +34,3 @@ resource "edgecenter_storage_s3_bucket" "example_s3_bucket" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

edgecenter/resource_edgecenter_instance.go

@@ -5,6 +5,7 @@ import (
 	"encoding/base64"
 	"errors"
 	"fmt"
+	"github.com/Edge-Center/edgecentercloud-go/edgecenter/port/v1/ports"
 	"log"
 	"sort"
 	"strconv"
@@ -28,6 +29,7 @@ const (
 	InstanceDeleting        int = 1200
 	InstanceCreatingTimeout int = 1200
 	InstancePoint               = "instances"
+	PortsPoint                  = "ports"
 
 	InstanceVMStateActive  = "active"
 	InstanceVMStateStopped = "stopped"
@@ -223,6 +225,11 @@ func resourceInstance() *schema.Resource {
 							Computed: true,
 							Optional: true,
 						},
+						"port_security_disabled": {
+							Type:     schema.TypeBool,
+							Optional: true,
+							Computed: true,
+						},
 					},
 				},
 			},
@@ -498,6 +505,62 @@ func resourceInstanceCreate(ctx context.Context, d *schema.ResourceData, m inter
 		return Instance, nil
 	},
 	)
+	if err != nil {
+		return diag.FromErr(err)
+	}
+	instanceID := InstanceID.(string)
+	interfacesListAPI, err := instances.ListInterfacesAll(clientV1, instanceID)
+	if err != nil {
+		return diag.FromErr(err)
+	}
+
+	portSecurityOptsListExtracted, err := extractPortSecurityOpts(ifs)
+	if err != nil {
+		return diag.FromErr(err)
+	}
+
+	var portSecurityOptsList []InstancePortSecurityOpts
+	for _, iFace := range interfacesListAPI {
+		if len(iFace.IPAssignments) == 0 {
+			continue
+		}
+
+		portID := iFace.PortID
+		for _, assignment := range iFace.IPAssignments {
+
+			subnetID := assignment.SubnetID
+			ipAddress := assignment.IPAddress.String()
+
+			var portSecurityDisabled bool
+			for _, interfaceExtracted := range portSecurityOptsListExtracted {
+				if interfaceExtracted.SubnetID == subnetID || interfaceExtracted.IPAddress == ipAddress || interfaceExtracted.PortID == portID {
+					portSecurityDisabled = interfaceExtracted.PortSecurityDisabled
+					break
+				}
+			}
+
+			var portSecOpts InstancePortSecurityOpts
+			portSecOpts.PortID = portID
+			portSecOpts.PortSecurityDisabled = portSecurityDisabled
+
+			portSecurityOptsList = append(portSecurityOptsList, portSecOpts)
+		}
+	}
+
+	if len(portSecurityOptsList) > 0 {
+		portsClientV1, err := CreateClient(provider, d, PortsPoint, VersionPointV1)
+		if err != nil {
+			return diag.FromErr(err)
+		}
+		for _, v := range portSecurityOptsList {
+			if v.PortSecurityDisabled {
+				if _, err := ports.DisablePortSecurity(portsClientV1, v.PortID).Extract(); err != nil {
+					return diag.FromErr(err)
+				}
+			}
+		}
+	}
+
 	log.Printf("[DEBUG] Instance id (%s)", InstanceID)
 	if err != nil {
 		return diag.FromErr(err)
@@ -620,6 +683,7 @@ func resourceInstanceRead(_ context.Context, d *schema.ResourceData, m interface
 			i["network_id"] = iFace.NetworkID
 			i["subnet_id"] = subnetID
 			i["port_id"] = portID
+			i["port_security_disabled"] = !iFace.PortSecurityEnabled
 			if interfaceOpts.FloatingIP != nil {
 				i["fip_source"] = interfaceOpts.FloatingIP.Source.String()
 				i["existing_fip_id"] = interfaceOpts.FloatingIP.ExistingFloatingID
@@ -798,6 +862,10 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 	}
 
 	if d.HasChange("interface") {
+		portsClientV1, err := CreateClient(provider, d, PortsPoint, VersionPointV1)
+		if err != nil {
+			return diag.FromErr(err)
+		}
 		iOldRaw, iNewRaw := d.GetChange("interface")
 		ifsOldSlice, ifsNewSlice := iOldRaw.([]interface{}), iNewRaw.([]interface{})
 		sort.Sort(instanceInterfaces(ifsOldSlice))
@@ -833,7 +901,7 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 					if err := detachInterfaceFromInstance(client, instanceID, iOld); err != nil {
 						return diag.FromErr(err)
 					}
-					if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+					if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 						return diag.FromErr(err)
 					}
 				}
@@ -869,15 +937,15 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 					if err := detachInterfaceFromInstance(client, instanceID, iOld); err != nil {
 						return diag.FromErr(err)
 					}
-					if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+					if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 						return diag.FromErr(err)
 					}
 				}
 			}
 
 			for _, item := range ifsNewSlice[len(ifsOldSlice):] {
 				iNew := item.(map[string]interface{})
-				if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+				if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 					return diag.FromErr(err)
 				}
 			}
@@ -912,7 +980,7 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 					if err := detachInterfaceFromInstance(client, instanceID, iOld); err != nil {
 						return diag.FromErr(err)
 					}
-					if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+					if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 						return diag.FromErr(err)
 					}
 				}