resource_alks_iamtrustrole_test.go

package main

import (
	"fmt"
	"regexp"

	"testing"

	"github.com/Cox-Automotive/alks-go"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
)

func TestAccAlksIamTrustRole_Basic(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config: testAccCheckAlksIamTrustRoleConfigBasic,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
				),
			},
			{
				// update the resource
				Config: testAccCheckAlksIamTrustRoleConfigUpdateBasic,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "enable_alks_access", "true"),
				),
			},
		},
	})
}

func TestAccAlksIamTrustRole_MaxDuration(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config: testAccCheckAlksIamTrustRoleConfigMaxDurationCreate,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "max_session_duration_in_seconds", "7200"),
				),
			},
		},
	})
}

func TestAccAlksIamTrustRole_Tags(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config: testAccCheckAlksIamTrustRoleCreateWithTags,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey1", "testValue1"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey2", "testValue2"),
				),
			},
			{
				// update the resource
				Config: testAccCheckAlksIamTrustRoleUpdateWithTags,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey3", "testValue3"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey2", "testValue2"),
				),
			},
		},
	})
}

func TestAccAlksIamTrustRole_DefaultTags(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config: testAccCheckAlksIamRoleTrustCreateWithTagsWithDefault,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey1", "testValue1"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey2", "testValue2"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags_all.defaultTagKey1", "defaultTagValue1"),
				),
			},
			{
				// update the resource
				Config: testAccCheckAlksIamTrustRoleUpdateWithTagsWithDefault,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey3", "testValue3"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags_all.defaultTagKey2", "defaultTagValue2"),
				),
			},
		},
	})
}

func TestAccAlksIamTrustRole_IgnoreTags(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				// create resource with tags
				Config: testAccCheckAlksIamRoleTrustCreateWithTagsWithIgnoreTags,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags_all.defaultTagKey1", "defaultTagValue1"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags_all.testKey2", "testValue2"),
				),
			},
			{
				//Add tags externally.  These should not trigger an update because they are excluded by ignore_tags
				PreConfig: func() {
					client := testAccProvider.Meta().(*AlksClient).client
					tags := TagMap{
						"defaultTagKey1":        "defaultTagValue1",
						"testKey2":              "testValue2",
						"ignorePrefix:testKey1": "testValue1",
						"ignoreFullKey":         "testValue1",
					}
					roleName := "bar"

					tagSlice := tagMapToSlice(tags)
					options := alks.UpdateIamRoleRequest{
						RoleName: &roleName,
						Tags:     &tagSlice,
					}
					if _, err := client.UpdateIamRole(&options); err != nil {
						fmt.Printf("Error in UpdateRole from test")
						return
					}
				},
				Config:   testAccCheckAlksIamRoleUpdateTrustWithTagsWithIgnoredTags,
				PlanOnly: true, //This PlanOnly ensures there are no changes happening on this step.  Any changes will cause the test to error out because of uncompleted plan
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "name", "bar"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "type", "Inner Account"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags_all.defaultTagKey1", "defaultTagValue1"),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.bar", "tags.testKey2", "testValue2"),
				),
			},
		},
	})
}

func TestAccAlksIamTrustRole_NamePrefix(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config: testAccCheckAlksIamTrustRoleConfigNamePrefix,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.nameprefix_trustrole", "name_prefix", "alks_test_acc_"),
					resource.TestMatchResourceAttr(
						"alks_iamtrustrole.nameprefix_trustrole", "name", regexp.MustCompile("alks_test_acc_[0-9]{26}")),
					resource.TestCheckResourceAttr(
						"alks_iamtrustrole.nameprefix_trustrole", "type", "Inner Account"),
				),
			},
		},
	})
}

func TestAccAlksIamTrustRole_NameAndNamePrefixConflict(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config:      testAccCheckAlksIamTrustRoleConfigNameAndNamePrefixConflict,
				ExpectError: regexp.MustCompile(".*\"name\": conflicts with name_prefix.*"),
			},
		},
	})
}

func TestAccAlksIamTrustRole_NameTooLong(t *testing.T) {
	var resp alks.IamRoleResponse

	resource.Test(t, resource.TestCase{
		PreCheck:     func() { testAccPreCheck(t) },
		Providers:    testAccProviders,
		CheckDestroy: testAccCheckAlksIamRoleDestroy(&resp),
		Steps: []resource.TestStep{
			{
				Config:      testAccCheckAlksIamTrustRoleConfigNameTooLong,
				ExpectError: regexp.MustCompile(".* expected length of name to be in the range \\(1 - 64\\).*"),
			},
		},
	})
}

const testAccCheckAlksIamTrustRoleConfigBasic = `
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false
	}

	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
	}
`
const testAccCheckAlksIamTrustRoleConfigMaxDurationCreate = `
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false
	}

	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		max_session_duration_in_seconds = 7200
	}
`

const testAccCheckAlksIamTrustRoleConfigUpdateBasic = `
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false
	}

	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		enable_alks_access = true
	}
`

const testAccCheckAlksIamTrustRoleCreateWithTags = `
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false
	}
	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		tags = {
			testKey1 = "testValue1"
			testKey2 = "testValue2"
		}
	}
`

const testAccCheckAlksIamRoleTrustCreateWithTagsWithDefault = `
	provider "alks" {
		default_tags {
			tags = {
				defaultTagKey1 = "defaultTagValue1"
			}
		}
	}
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false

	}
	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		tags = {
			testKey1 = "testValue1"
			testKey2 = "testValue2"
		}
	}

`
const testAccCheckAlksIamTrustRoleUpdateWithTagsWithDefault = `
	provider "alks" {
		default_tags {
			tags = {
				defaultTagKey2 = "defaultTagValue2"
			}
		}
	}
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false

	}
	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		tags = {
			testKey1 = "testValue1"
			testKey3 = "testValue3"
		}
	}
`

const testAccCheckAlksIamTrustRoleUpdateWithTags = `
resource "alks_iamrole" "foo" {
	name = "foo"
	type = "Amazon EC2"
	include_default_policies = false
}
resource "alks_iamtrustrole" "bar" {
	name = "bar"
	type = "Inner Account"
	trust_arn = "${alks_iamrole.foo.arn}"
	tags = {
		testKey3 = "testValue3"
		testKey2 = "testValue2"
	}
}
`

const testAccCheckAlksIamTrustRoleConfigNamePrefix = `
	resource "alks_iamrole" "nameprefix_role" {
		name_prefix = "alks_test_acc_"
		type = "Amazon EC2"
		include_default_policies = false
	}

	resource "alks_iamtrustrole" "nameprefix_trustrole" {
		name_prefix = "alks_test_acc_"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.nameprefix_role.arn}"
	}
`

const testAccCheckAlksIamTrustRoleConfigNameAndNamePrefixConflict = `
	resource "alks_iamrole" "nameprefixconflict_role" {
		name_prefix = "alks_test_acc_"
		type = "Amazon EC2"
		include_default_policies = false
	}

	resource "alks_iamtrustrole" "nameprefixconflict_trustrole" {
        name = "alks_test_acc"
		name_prefix = "alks_test_acc_"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.nameprefixconflict_role.arn}"
	}
`

const testAccCheckAlksIamTrustRoleConfigNameTooLong = `
	resource "alks_iamrole" "nametoolong_role" {
		name_prefix = "alks_test_acc_"
		type = "Amazon EC2"
		include_default_policies = false
	}

	resource "alks_iamtrustrole" "nametoolong_trustrole" {
		name = "nameandnametoolongggggggggggggggggggggggggggggggggggggggggggggggg"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.nametoolong_role.arn}"
	}
`

const testAccCheckAlksIamRoleTrustCreateWithTagsWithIgnoreTags = `
	provider "alks" {
		default_tags {
			tags = {
				defaultTagKey1 = "defaultTagValue1"
			}
		}
	}
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false
	}
	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		tags = {
			testKey2 = "testValue2"
		}
	}
`

const testAccCheckAlksIamRoleUpdateTrustWithTagsWithIgnoredTags = `
	provider "alks" {
		default_tags {
			tags = {
				defaultTagKey1 = "defaultTagValue1"
			}
		}
		ignore_tags {
			keys = ["ignoreFullKey"]
			key_prefixes = ["ignorePrefix"]
		}
	}
	resource "alks_iamrole" "foo" {
		name = "foo"
		type = "Amazon EC2"
		include_default_policies = false
	}
	resource "alks_iamtrustrole" "bar" {
		name = "bar"
		type = "Inner Account"
		trust_arn = "${alks_iamrole.foo.arn}"
		tags = {
			testKey2 = "testValue2"
		}
	}
`