[feat][gov] Add resource configuration provider (#56)

* update repo to reflect v.2.9.0 of the api

* working

notes in readme

all tests passing, working on a local server with real examples

docs

lint fixes

add comment on folder deletion recursion

notes on reviewing

better handling for config variables as secret

update docs

lint

lint

add resources resource

docs

fix test

lint

lint

lint

docs update

wip on resource configs

Bump golang.org/x/crypto from 0.23.0 to 0.35.0 (#53)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.23.0 to 0.35.0.
- [Commits](golang/crypto@v0.23.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.35.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

[feat][gov] Update repo to reflect v.2.9.0 of the API (#52)

* update repo to reflect v.2.9.0 of the api

* fixes to cursor slop

* notes in readme

* all tests passing, working on a local server with real examples

* docs

* lint fixes

* add comment on folder deletion recursion

* notes on reviewing

* better handling for config variables as secret

* update docs

* lint

* lint

[feat][gov] Add ability to manage resources (#55)

* update repo to reflect v.2.9.0 of the api

* fixes to cursor slop

* notes in readme

* all tests passing, working on a local server with real examples

* docs

* lint fixes

* add comment on folder deletion recursion

* notes on reviewing

* better handling for config variables as secret

* update docs

* lint

* lint

* add resources resource

* docs

* fix test

* lint

* lint

* lint

* docs update

* more accurate docs

probable fixes

more linting

* docs

* more linting

* mention ignoring options in docs

* tf file

Author: simplyluke

docs/resources/resource_configuration.md

@@ -0,0 +1,96 @@
+---
+page_title: "Resource: retool_resource_configuration"
+description: |-
+  A resource configuration defines environment-specific configuration for a Retool resource. This allows you to configure different connection settings, credentials, and options for a resource across different environments (e.g., production, staging, development).
+  For example, you might have a PostgreSQL resource that connects to different database instances in production vs. staging environments, each with different credentials and connection strings.
+---
+
+# Resource: retool_resource_configuration
+
+A resource configuration defines environment-specific configuration for a Retool resource. This allows you to configure different connection settings, credentials, and options for a resource across different environments (e.g., production, staging, development).
+
+For example, you might have a PostgreSQL resource that connects to different database instances in production vs. staging environments, each with different credentials and connection strings.
+
+## Example Usage
+
+```terraform
+# First, create a resource
+resource "retool_resource" "postgres" {
+  display_name = "PostgreSQL Database"
+  type         = "postgresql"
+  options = jsonencode({
+    host     = "localhost"
+    port     = 5432
+    database = "mydb"
+    user     = "default_user"
+  })
+}
+
+# Get environments
+data "retool_environments" "all" {}
+
+# Create a production-specific configuration
+resource "retool_resource_configuration" "postgres_production" {
+  resource_id    = retool_resource.postgres.id
+  environment_id = [for env in data.retool_environments.all.environments : env.id if env.name == "production"][0]
+
+  options = jsonencode({
+    host     = "prod-db.example.com"
+    port     = 5432
+    database = "production_db"
+    user     = "prod_user"
+    password = "prod_password"
+    ssl      = true
+  })
+
+  lifecycle {
+    # Ignore changes to options since the API adds default values
+    ignore_changes = [options]
+  }
+}
+
+# Create a staging-specific configuration
+resource "retool_resource_configuration" "postgres_staging" {
+  resource_id    = retool_resource.postgres.id
+  environment_id = [for env in data.retool_environments.all.environments : env.id if env.name == "staging"][0]
+
+  options = jsonencode({
+    host     = "staging-db.example.com"
+    port     = 5432
+    database = "staging_db"
+    user     = "staging_user"
+    password = "staging_password"
+    ssl      = true
+  })
+
+  lifecycle {
+    ignore_changes = [options]
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `environment_id` (String) The UUID of the environment for this configuration. Cannot be changed after creation.
+- `options` (String, Sensitive) JSON string containing the environment-specific resource configuration options. The structure varies by resource type and mirrors the options structure used when creating a resource.
+- `resource_id` (String) The UUID or name of the resource to configure. Cannot be changed after creation.
+
+### Read-Only
+
+- `created_at` (String) The timestamp when the resource configuration was created.
+- `id` (String) The UUID of the resource configuration.
+- `updated_at` (String) The timestamp when the resource configuration was last updated.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+#!/bin/bash
+
+# Import a resource configuration using its ID
+terraform import retool_resource_configuration.example 01234567-89ab-cdef-0123-456789abcdef
+```

examples/resources/retool_resource_configuration/import.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+# Import a resource configuration using its ID
+terraform import retool_resource_configuration.example 01234567-89ab-cdef-0123-456789abcdef
+

examples/resources/retool_resource_configuration/resource.tf

@@ -0,0 +1,54 @@
+# First, create a resource
+resource "retool_resource" "postgres" {
+  display_name = "PostgreSQL Database"
+  type         = "postgresql"
+  options = jsonencode({
+    host     = "localhost"
+    port     = 5432
+    database = "mydb"
+    user     = "default_user"
+  })
+}
+
+# Get environments
+data "retool_environments" "all" {}
+
+# Create a production-specific configuration
+resource "retool_resource_configuration" "postgres_production" {
+  resource_id    = retool_resource.postgres.id
+  environment_id = [for env in data.retool_environments.all.environments : env.id if env.name == "production"][0]
+
+  options = jsonencode({
+    host     = "prod-db.example.com"
+    port     = 5432
+    database = "production_db"
+    user     = "prod_user"
+    password = "prod_password"
+    ssl      = true
+  })
+
+  lifecycle {
+    # Ignore changes to options since the API adds default values
+    ignore_changes = [options]
+  }
+}
+
+# Create a staging-specific configuration
+resource "retool_resource_configuration" "postgres_staging" {
+  resource_id    = retool_resource.postgres.id
+  environment_id = [for env in data.retool_environments.all.environments : env.id if env.name == "staging"][0]
+
+  options = jsonencode({
+    host     = "staging-db.example.com"
+    port     = 5432
+    database = "staging_db"
+    user     = "staging_user"
+    password = "staging_password"
+    ssl      = true
+  })
+
+  lifecycle {
+    ignore_changes = [options]
+  }
+}
+

internal/provider/provider.go

@@ -24,6 +24,7 @@ import (
 	"github.com/tryretool/terraform-provider-retool/internal/provider/folder"
 	"github.com/tryretool/terraform-provider-retool/internal/provider/group"
 	"github.com/tryretool/terraform-provider-retool/internal/provider/permissions"
+	"github.com/tryretool/terraform-provider-retool/internal/provider/resourceconfiguration"
 	"github.com/tryretool/terraform-provider-retool/internal/provider/retoolresource"
 	"github.com/tryretool/terraform-provider-retool/internal/provider/sourcecontrol"
 	"github.com/tryretool/terraform-provider-retool/internal/provider/sourcecontrolsettings"
@@ -304,6 +305,7 @@ func (p *retoolProvider) Resources(_ context.Context) []func() resource.Resource
 		folder.NewResource,
 		group.NewResource,
 		permissions.NewResource,
+		resourceconfiguration.NewResource,
 		retoolresource.NewResource,
 		space.NewResource,
 		sso.NewResource,

internal/provider/resourceconfiguration/json_semantic_equals.go

@@ -0,0 +1,101 @@
+package resourceconfiguration
+
+import (
+	"context"
+	"encoding/json"
+
+	"github.com/hashicorp/terraform-plugin-framework/resource/schema/planmodifier"
+)
+
+// jsonSemanticEqualsPlanModifier is a plan modifier that suppresses diffs when JSON is semantically equal.
+type jsonSemanticEqualsPlanModifier struct{}
+
+// Description returns a human-readable description of the plan modifier.
+func (m jsonSemanticEqualsPlanModifier) Description(_ context.Context) string {
+	return "Suppresses diff when JSON values are semantically equal"
+}
+
+// MarkdownDescription returns a markdown description of the plan modifier.
+func (m jsonSemanticEqualsPlanModifier) MarkdownDescription(_ context.Context) string {
+	return "Suppresses diff when JSON values are semantically equal"
+}
+
+// PlanModifyString implements the plan modification logic.
+func (m jsonSemanticEqualsPlanModifier) PlanModifyString(_ context.Context, req planmodifier.StringRequest, resp *planmodifier.StringResponse) {
+	// Do nothing if there is no state value.
+	if req.StateValue.IsNull() {
+		return
+	}
+
+	// Do nothing if there is no plan value.
+	if req.PlanValue.IsUnknown() || req.PlanValue.IsNull() {
+		return
+	}
+
+	// Do nothing if the values are already equal.
+	if req.StateValue.Equal(req.PlanValue) {
+		return
+	}
+
+	// Parse both JSON values.
+	var stateJSON, planJSON interface{}
+	if err := json.Unmarshal([]byte(req.StateValue.ValueString()), &stateJSON); err != nil {
+		// If we can't parse the state value, let Terraform handle the diff.
+		return
+	}
+	if err := json.Unmarshal([]byte(req.PlanValue.ValueString()), &planJSON); err != nil {
+		// If we can't parse the plan value, let Terraform handle the diff.
+		return
+	}
+
+	// Check if the plan JSON contains all the fields from the state JSON with the same values.
+	// This allows the API to add additional fields without causing a diff.
+	if jsonContains(stateJSON, planJSON) {
+		// Values are semantically equal, use the state value to suppress the diff.
+		resp.PlanValue = req.StateValue
+	}
+}
+
+// jsonContains checks if container contains all fields from subset with matching values.
+// This is a simplified check that works for our use case.
+func jsonContains(container, subset interface{}) bool {
+	switch subsetVal := subset.(type) {
+	case map[string]interface{}:
+		containerMap, ok := container.(map[string]interface{})
+		if !ok {
+			return false
+		}
+		// Check that all fields in subset exist in container with matching values.
+		for key, subVal := range subsetVal {
+			contVal, exists := containerMap[key]
+			if !exists {
+				// Subset has a field that container doesn't have.
+				return false
+			}
+			if !jsonContains(contVal, subVal) {
+				return false
+			}
+		}
+		return true
+	case []interface{}:
+		containerSlice, ok := container.([]interface{})
+		if !ok || len(containerSlice) != len(subsetVal) {
+			return false
+		}
+		// Arrays must match exactly (same length and same values in same order).
+		for i, subVal := range subsetVal {
+			if !jsonContains(containerSlice[i], subVal) {
+				return false
+			}
+		}
+		return true
+	default:
+		// For primitive values, use direct comparison.
+		return container == subset
+	}
+}
+
+// JSONSemanticEquals returns a plan modifier that suppresses diffs when JSON is semantically equal.
+func JSONSemanticEquals() planmodifier.String {
+	return jsonSemanticEqualsPlanModifier{}
+}