Merge pull request #2109 from tencentcloudstack/feat/kms

feat/kms

Author: andrew-tx

.changelog/2109.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+tencentcloud_kms_get_parameters_for_import
+```

tencentcloud/data_source_tc_kms_get_parameters_for_import.go

@@ -0,0 +1,133 @@
+/*
+Use this data source to query detailed information of kms get_parameters_for_import
+
+Example Usage
+
+```hcl
+data "tencentcloud_kms_get_parameters_for_import" "example" {
+  key_id             = "786aea8c-4aec-11ee-b601-525400281a45"
+  wrapping_algorithm = "RSAES_OAEP_SHA_1"
+  wrapping_key_spec  = "RSA_2048"
+}
+```
+*/
+package tencentcloud
+
+import (
+	"context"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+	kms "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/kms/v20190118"
+	"github.com/tencentcloudstack/terraform-provider-tencentcloud/tencentcloud/internal/helper"
+)
+
+func dataSourceTencentCloudKmsGetParametersForImport() *schema.Resource {
+	return &schema.Resource{
+		Read: dataSourceTencentCloudKmsGetParametersForImportRead,
+		Schema: map[string]*schema.Schema{
+			"key_id": {
+				Required:    true,
+				Type:        schema.TypeString,
+				Description: "CMK unique identifier.",
+			},
+			"wrapping_algorithm": {
+				Required:    true,
+				Type:        schema.TypeString,
+				Description: "Specifies the algorithm for encrypting key material, currently supports RSAES_PKCS1_V1_5, RSAES_OAEP_SHA_1, RSAES_OAEP_SHA_256.",
+			},
+			"wrapping_key_spec": {
+				Required:    true,
+				Type:        schema.TypeString,
+				Description: "Specifies the type of encryption key material, currently only supports RSA_2048.",
+			},
+			"public_key": {
+				Computed:    true,
+				Type:        schema.TypeString,
+				Description: "Base64-encoded public key content.",
+			},
+			"import_token": {
+				Computed:    true,
+				Type:        schema.TypeString,
+				Description: "The token required for importing key material is used as the parameter of ImportKeyMaterial.",
+			},
+			"parameters_valid_to": {
+				Computed:    true,
+				Type:        schema.TypeInt,
+				Description: "The validity period of the exported token and public key cannot be imported after this period, and you need to call GetParametersForImport again to obtain it.",
+			},
+			"result_output_file": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				Description: "Used to save results.",
+			},
+		},
+	}
+}
+
+func dataSourceTencentCloudKmsGetParametersForImportRead(d *schema.ResourceData, meta interface{}) error {
+	defer logElapsed("data_source.tencentcloud_kms_get_parameters_for_import.read")()
+	defer inconsistentCheck(d, meta)()
+
+	var (
+		logId                  = getLogId(contextNil)
+		ctx                    = context.WithValue(context.TODO(), logIdKey, logId)
+		service                = KmsService{client: meta.(*TencentCloudClient).apiV3Conn}
+		getParametersForImport *kms.GetParametersForImportResponseParams
+		keyId                  string
+	)
+
+	paramMap := make(map[string]interface{})
+	if v, ok := d.GetOk("key_id"); ok {
+		paramMap["KeyId"] = helper.String(v.(string))
+		keyId = v.(string)
+	}
+
+	if v, ok := d.GetOk("wrapping_algorithm"); ok {
+		paramMap["WrappingAlgorithm"] = helper.String(v.(string))
+	}
+
+	if v, ok := d.GetOk("wrapping_key_spec"); ok {
+		paramMap["WrappingKeySpec"] = helper.String(v.(string))
+	}
+
+	err := resource.Retry(readRetryTimeout, func() *resource.RetryError {
+		result, e := service.DescribeKmsGetParametersForImportByFilter(ctx, paramMap)
+		if e != nil {
+			return retryError(e)
+		}
+
+		getParametersForImport = result
+		return nil
+	})
+
+	if err != nil {
+		return err
+	}
+
+	if getParametersForImport.KeyId != nil {
+		_ = d.Set("key_id", getParametersForImport.KeyId)
+	}
+
+	if getParametersForImport.PublicKey != nil {
+		_ = d.Set("public_key", getParametersForImport.PublicKey)
+	}
+
+	if getParametersForImport.ImportToken != nil {
+		_ = d.Set("import_token", getParametersForImport.ImportToken)
+	}
+
+	if getParametersForImport.ParametersValidTo != nil {
+		_ = d.Set("parameters_valid_to", getParametersForImport.ParametersValidTo)
+	}
+
+	d.SetId(keyId)
+	output, ok := d.GetOk("result_output_file")
+	if ok && output.(string) != "" {
+		if e := writeToFile(output.(string), d); e != nil {
+			return e
+		}
+	}
+
+	return nil
+}

tencentcloud/data_source_tc_kms_get_parameters_for_import_test.go

@@ -0,0 +1,34 @@
+package tencentcloud
+
+import (
+	"testing"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+)
+
+// go test -i; go test -test.run TestAccTencentCloudNeedFixKmsGetParametersForImportDataSource_basic -v
+func TestAccTencentCloudNeedFixKmsGetParametersForImportDataSource_basic(t *testing.T) {
+	t.Parallel()
+	resource.Test(t, resource.TestCase{
+		PreCheck: func() {
+			testAccPreCheck(t)
+		},
+		Providers: testAccProviders,
+		Steps: []resource.TestStep{
+			{
+				Config: testAccKmsGetParametersForImportDataSource,
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckTencentCloudDataSourceID("data.tencentcloud_kms_get_parameters_for_import.example"),
+				),
+			},
+		},
+	})
+}
+
+const testAccKmsGetParametersForImportDataSource = `
+data "tencentcloud_kms_get_parameters_for_import" "example" {
+  key_id             = "786aea8c-4aec-11ee-b601-525400281a45"
+  wrapping_algorithm = "RSAES_OAEP_SHA_1"
+  wrapping_key_spec  = "RSA_2048"
+}
+`

tencentcloud/provider.go

@@ -543,6 +543,7 @@ Key Management Service(KMS)
   Data Source
     tencentcloud_kms_keys
     tencentcloud_kms_public_key
+    tencentcloud_kms_get_parameters_for_import
 
   Resource
     tencentcloud_kms_key
@@ -2073,6 +2074,7 @@ func Provider() *schema.Provider {
 			"tencentcloud_protocol_template_groups":                  dataSourceTencentCloudProtocolTemplateGroups(),
 			"tencentcloud_kms_keys":                                  dataSourceTencentCloudKmsKeys(),
 			"tencentcloud_kms_public_key":                            dataSourceTencentCloudKmsPublicKey(),
+			"tencentcloud_kms_get_parameters_for_import":             dataSourceTencentCloudKmsGetParametersForImport(),
 			"tencentcloud_ssm_products":                              dataSourceTencentCloudSsmProducts(),
 			"tencentcloud_ssm_secrets":                               dataSourceTencentCloudSsmSecrets(),
 			"tencentcloud_ssm_secret_versions":                       dataSourceTencentCloudSsmSecretVersions(),