feat(CLOUDDEV-420): added disable_port_security option to instance re…

…source

docs/data-sources/floatingip.md

@@ -71,5 +71,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/image.md

@@ -71,5 +71,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/instance.md

@@ -116,5 +116,3 @@ Read-Only:
 
 - `delete_on_termination` (Boolean)
 - `volume_id` (String)
-
-

docs/data-sources/k8s.md

@@ -82,5 +82,3 @@ Read-Only:
 - `node_count` (Number)
 - `stack_id` (String)
 - `uuid` (String)
-
-

docs/data-sources/k8s_client_config.md

@@ -43,5 +43,3 @@ data "edgecenter_k8s_client_config" "cfg" {
 - `client_certificate_data` (String) The client_certificate_data field from k8s config.
 - `client_key_data` (String) The client_key_data field from k8s config.
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/k8s_pool.md

@@ -55,5 +55,3 @@ data "edgecenter_k8s_pool" "pool" {
 - `node_count` (Number) The current number of nodes in the pool.
 - `node_names` (List of String) A list of names of nodes within the pool.
 - `stack_id` (String) The identifier of the underlying infrastructure stack used by this pool.
-
-

docs/data-sources/lblistener.md

@@ -61,5 +61,3 @@ output "view" {
 - `protocol` (String) Available values is 'HTTP', 'HTTPS', 'TCP', 'UDP'
 - `protocol_port` (Number) The port on which the protocol is bound.
 - `provisioning_status` (String) The current provisioning status of the load balancer.
-
-

docs/data-sources/lbpool.md

@@ -87,5 +87,3 @@ Read-Only:
 - `persistence_granularity` (String)
 - `persistence_timeout` (Number)
 - `type` (String)
-
-

docs/data-sources/loadbalancer.md

@@ -79,5 +79,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/loadbalancerv2.md

@@ -67,5 +67,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/network.md

@@ -96,5 +96,3 @@ Read-Only:
 
 - `destination` (String)
 - `nexthop` (String)
-
-

docs/data-sources/project.md

@@ -32,5 +32,3 @@ data "edgecenter_project" "pr" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/region.md

@@ -32,5 +32,3 @@ data "edgecenter_region" "rg" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/reservedfixedip.md

@@ -67,5 +67,3 @@ Read-Only:
 
 - `ip_address` (String)
 - `mac_address` (String)
-
-

docs/data-sources/router.md

@@ -97,5 +97,3 @@ Read-Only:
 
 - `destination` (String)
 - `nexthop` (String)
-
-

docs/data-sources/secret.md

@@ -60,5 +60,3 @@ output "view" {
 - `id` (String) The ID of this resource.
 - `mode` (String) The mode of the encryption algorithm.
 - `status` (String) The current status of the secret.
-
-

docs/data-sources/securitygroup.md

@@ -84,5 +84,3 @@ Read-Only:
 - `protocol` (String)
 - `remote_ip_prefix` (String)
 - `updated_at` (String)
-
-

docs/data-sources/servergroup.md

@@ -63,5 +63,3 @@ Read-Only:
 
 - `instance_id` (String)
 - `instance_name` (String)
-
-

docs/data-sources/storage_s3.md

@@ -38,5 +38,3 @@ data "edgecenter_storage_s3" "example_s3" {
 - `generated_s3_endpoint` (String) A s3 endpoint for new storage resource.
 - `id` (String) The ID of this resource.
 - `location` (String) A location of new storage resource. One of (s-dt2)
-
-

docs/data-sources/storage_s3_bucket.md

@@ -34,5 +34,3 @@ data "edgecenter_storage_s3_bucket" "example_s3_bucket" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/data-sources/subnet.md

@@ -81,5 +81,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/data-sources/volume.md

@@ -69,5 +69,3 @@ Read-Only:
 - `key` (String)
 - `read_only` (Boolean)
 - `value` (String)
-
-

docs/resources/cdn_origingroup.md

@@ -60,5 +60,3 @@ Optional:
 Read-Only:
 
 - `id` (Number) The ID of this resource.
-
-

docs/resources/cdn_resource.md

@@ -618,5 +618,3 @@ Required:
 Optional:
 
 - `enabled` (Boolean)
-
-

docs/resources/cdn_rule.md

@@ -607,5 +607,3 @@ Required:
 Optional:
 
 - `enabled` (Boolean)
-
-

docs/resources/cdn_sslcert.md

@@ -48,5 +48,3 @@ resource "edgecenter_cdn_sslcert" "cdnopt_cert" {
 - `automated` (Boolean) The way SSL certificate was issued.
 - `has_related_resources` (Boolean) It shows if the SSL certificate is used by a CDN resource.
 - `id` (String) The ID of this resource.
-
-

docs/resources/instance.md

@@ -75,10 +75,11 @@ resource "edgecenter_instance" "instance" {
   }
 
   interface {
-    type            = "subnet"
-    network_id      = edgecenter_network.network.id
-    subnet_id       = edgecenter_subnet.subnet.id
-    security_groups = ["d75db0b2-58f1-4a11-88c6-a932bb897310"]
+    type                   = "subnet"
+    network_id             = edgecenter_network.network.id
+    subnet_id              = edgecenter_subnet.subnet.id
+    security_groups        = ["d75db0b2-58f1-4a11-88c6-a932bb897310"]
+    port_security_disabled = true
   }
 
   metadata_map = {
@@ -199,6 +200,7 @@ Optional:
 - `network_id` (String) Required if type is 'subnet' or 'any_subnet'.
 - `order` (Number) Order of attaching interface
 - `port_id` (String) required if type is  'reserved_fixed_ip'
+- `port_security_disabled` (Boolean)
 - `security_groups` (List of String) list of security group IDs
 - `subnet_id` (String) Required if type is 'subnet'.
 - `type` (String) Available value is 'subnet', 'any_subnet', 'external', 'reserved_fixed_ip'

docs/resources/keypair.md

@@ -46,5 +46,3 @@ output "kp" {
 - `fingerprint` (String) A fingerprint of the SSH public key, used to verify the integrity of the key.
 - `id` (String) The ID of this resource.
 - `sshkey_id` (String) The unique identifier assigned by the provider to the SSH key pair.
-
-

docs/resources/storage_s3.md

@@ -44,5 +44,3 @@ resource "edgecenter_storage_s3" "example_s3" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

docs/resources/storage_s3_bucket.md

@@ -34,5 +34,3 @@ resource "edgecenter_storage_s3_bucket" "example_s3_bucket" {
 ### Read-Only
 
 - `id` (String) The ID of this resource.
-
-

edgecenter/resource_edgecenter_instance.go

@@ -28,6 +28,7 @@ const (
 	InstanceDeleting        int = 1200
 	InstanceCreatingTimeout int = 1200
 	InstancePoint               = "instances"
+	PortsPoint                  = "ports"
 
 	InstanceVMStateActive  = "active"
 	InstanceVMStateStopped = "stopped"
@@ -223,6 +224,11 @@ func resourceInstance() *schema.Resource {
 							Computed: true,
 							Optional: true,
 						},
+						"port_security_disabled": {
+							Type:     schema.TypeBool,
+							Optional: true,
+							Computed: true,
+						},
 					},
 				},
 			},
@@ -394,12 +400,12 @@ func resourceInstanceCreate(ctx context.Context, d *schema.ResourceData, m inter
 	config := m.(*Config)
 	provider := config.Provider
 
-	clientV1, err := CreateClient(provider, d, InstancePoint, VersionPointV1)
+	instancesClientV1, err := CreateClient(provider, d, InstancePoint, VersionPointV1)
 	if err != nil {
 		return diag.FromErr(err)
 	}
 
-	clientV2, err := CreateClient(provider, d, InstancePoint, VersionPointV2)
+	instancesClientV2, err := CreateClient(provider, d, InstancePoint, VersionPointV2)
 	if err != nil {
 		return diag.FromErr(err)
 	}
@@ -449,11 +455,11 @@ func resourceInstanceCreate(ctx context.Context, d *schema.ResourceData, m inter
 
 	ifs := d.Get("interface").([]interface{})
 	if len(ifs) > 0 {
-		interfacesList, err := extractInstanceInterfaceToListCreate(ifs)
+		ifaceCreateOptsList, err := extractInstanceInterfaceToListCreate(ifs)
 		if err != nil {
 			return diag.FromErr(err)
 		}
-		createOpts.Interfaces = interfacesList
+		createOpts.Interfaces = ifaceCreateOptsList
 	}
 
 	if metadata, ok := d.GetOk("metadata"); ok {
@@ -479,15 +485,15 @@ func resourceInstanceCreate(ctx context.Context, d *schema.ResourceData, m inter
 	}
 
 	log.Printf("[DEBUG] Instance create options: %+v", createOpts)
-	results, err := instances.Create(clientV2, createOpts).Extract()
+	results, err := instances.Create(instancesClientV2, createOpts).Extract()
 	if err != nil {
 		return diag.FromErr(err)
 	}
 
 	taskID := results.Tasks[0]
 	log.Printf("[DEBUG] Task id (%s)", taskID)
-	InstanceID, err := tasks.WaitTaskAndReturnResult(clientV1, taskID, true, InstanceCreatingTimeout, func(task tasks.TaskID) (interface{}, error) {
-		taskInfo, err := tasks.Get(clientV1, string(task)).Extract()
+	InstanceID, err := tasks.WaitTaskAndReturnResult(instancesClientV1, taskID, true, InstanceCreatingTimeout, func(task tasks.TaskID) (interface{}, error) {
+		taskInfo, err := tasks.Get(instancesClientV1, string(task)).Extract()
 		if err != nil {
 			return nil, fmt.Errorf("cannot get task with ID: %s. Error: %w", task, err)
 		}
@@ -498,11 +504,32 @@ func resourceInstanceCreate(ctx context.Context, d *schema.ResourceData, m inter
 		return Instance, nil
 	},
 	)
-	log.Printf("[DEBUG] Instance id (%s)", InstanceID)
 	if err != nil {
 		return diag.FromErr(err)
 	}
 
+	instanceID := InstanceID.(string)
+
+	// Code below adjusts all interfaces PortSecurityDisabled opt
+	interfacesListAPI, err := instances.ListInterfacesAll(instancesClientV1, instanceID)
+	if err != nil {
+		return diag.FromErr(fmt.Errorf("error from getting instance interfaces: %w", err))
+	}
+
+	portsClientV1, err := CreateClient(provider, d, PortsPoint, VersionPointV1)
+	if err != nil {
+		return diag.FromErr(fmt.Errorf("error from creating ports client: %w", err))
+	}
+	for _, iface := range ifs {
+		ifaceMap := iface.(map[string]interface{})
+		err = adjustPortSecurityDisabledOpt(portsClientV1, interfacesListAPI, ifaceMap)
+		if err != nil {
+			return diag.FromErr(fmt.Errorf("error from port securtity disable option configuring. Interface: %#v, error: %w", ifaceMap, err))
+		}
+	}
+
+	log.Printf("[DEBUG] Instance id (%s)", InstanceID)
+
 	d.SetId(InstanceID.(string))
 	resourceInstanceRead(ctx, d, m)
 
@@ -620,6 +647,7 @@ func resourceInstanceRead(_ context.Context, d *schema.ResourceData, m interface
 			i["network_id"] = iFace.NetworkID
 			i["subnet_id"] = subnetID
 			i["port_id"] = portID
+			i["port_security_disabled"] = !iFace.PortSecurityEnabled
 			if interfaceOpts.FloatingIP != nil {
 				i["fip_source"] = interfaceOpts.FloatingIP.Source.String()
 				i["existing_fip_id"] = interfaceOpts.FloatingIP.ExistingFloatingID
@@ -798,6 +826,10 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 	}
 
 	if d.HasChange("interface") {
+		portsClientV1, err := CreateClient(provider, d, PortsPoint, VersionPointV1)
+		if err != nil {
+			return diag.FromErr(err)
+		}
 		iOldRaw, iNewRaw := d.GetChange("interface")
 		ifsOldSlice, ifsNewSlice := iOldRaw.([]interface{}), iNewRaw.([]interface{})
 		sort.Sort(instanceInterfaces(ifsOldSlice))
@@ -833,7 +865,7 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 					if err := detachInterfaceFromInstance(client, instanceID, iOld); err != nil {
 						return diag.FromErr(err)
 					}
-					if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+					if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 						return diag.FromErr(err)
 					}
 				}
@@ -869,15 +901,15 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 					if err := detachInterfaceFromInstance(client, instanceID, iOld); err != nil {
 						return diag.FromErr(err)
 					}
-					if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+					if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 						return diag.FromErr(err)
 					}
 				}
 			}
 
 			for _, item := range ifsNewSlice[len(ifsOldSlice):] {
 				iNew := item.(map[string]interface{})
-				if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+				if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 					return diag.FromErr(err)
 				}
 			}
@@ -912,7 +944,7 @@ func resourceInstanceUpdate(ctx context.Context, d *schema.ResourceData, m inter
 					if err := detachInterfaceFromInstance(client, instanceID, iOld); err != nil {
 						return diag.FromErr(err)
 					}
-					if err := attachInterfaceToInstance(client, instanceID, iNew); err != nil {
+					if err := attachInterfaceToInstance(client, portsClientV1, instanceID, iNew); err != nil {
 						return diag.FromErr(err)
 					}
 				}