-
Notifications
You must be signed in to change notification settings - Fork 78
Terraform Provider: Use updated APIs for Users, Roles, & Auth Connectors #978
Conversation
b27c487
to
902b2a2
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Did you run this locally against a v15/master build?
The tests fail because we are probably using a v14.x version on the CI/CD
89c3f46
to
f4ec9de
Compare
If we're switching to the APIs which return the created/updated resource, we can probably remove the logic which tries to Get the resource after the create/update. |
I was under the impression that behavior existed to prevent cache propagation delay from impacting future calls to Get. |
01a44c0
to
130284b
Compare
130284b
to
9583a01
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Orca Security Scan Summary
Status | Check | Issues by priority | |
---|---|---|---|
Passed | Infrastructure as Code | 0 0 0 0 | View in Orca |
Failed | Vulnerabilities | 0 1 0 0 | View in Orca |
Passed | Secrets | 0 0 0 0 | View in Orca |
The resources now all expose a Create, Update, Upsert RPC which returns the resource and an error. The generated code now uses Create for creating resources and Upsert for updating resources. The Update RPC is not used because it enforces optimistic locking which breaks the ownership model expected by the provider. Additionally, the GetUser RPC now takes a context so the hack to accommodate it has been removed.
9583a01
to
7e95025
Compare
e8fbf99
to
4b0e2f0
Compare
The resources now all expose a Create, Update, Upsert RPC which returns the resource and an error. The generated code now uses Create for creating resources and Upsert for updating resources. The Update RPC is not used because it enforces optimistic locking which breaks the ownership model expected by the provider. Additionally, the GetUser RPC now takes a context so the hack to accommodate it has been removed.
- Do Not Merge Until v15 -
The APIs used in this PR are not being backported to v14 so this cannot land until the
gravitational/teleport-plugins
repo is updated to point to branch/v15 ofgravitational/teleport
. go.mod was updated in this PR to point at a commit of master fromgravitational/teleport
so that the functionality could be validated.