record.go

package domain

import (
	"context"
	"errors"
	"fmt"
	"strings"

	"github.com/hashicorp/terraform-plugin-log/tflog"
	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/validation"
	domain "github.com/scaleway/scaleway-sdk-go/api/domain/v2beta1"
	"github.com/scaleway/scaleway-sdk-go/scw"
	"github.com/scaleway/terraform-provider-scaleway/v2/internal/httperrors"
	"github.com/scaleway/terraform-provider-scaleway/v2/internal/locality"
	"github.com/scaleway/terraform-provider-scaleway/v2/internal/services/account"
	"github.com/scaleway/terraform-provider-scaleway/v2/internal/verify"
)

var changeKeys = []string{
	"geo_ip",
	"name",
	"data",
	"priority",
	"ttl",
	"type",
	"http_service",
	"weighted",
	"view",
	"dns_zone",
	"keep_empty_zone",
}

func ResourceRecord() *schema.Resource {
	return &schema.Resource{
		CreateContext: resourceRecordCreate,
		ReadContext:   resourceDomainRecordRead,
		UpdateContext: resourceDomainRecordUpdate,
		DeleteContext: resourceDomainRecordDelete,
		Timeouts: &schema.ResourceTimeout{
			Create:  schema.DefaultTimeout(defaultDomainRecordTimeout),
			Read:    schema.DefaultTimeout(defaultDomainRecordTimeout),
			Update:  schema.DefaultTimeout(defaultDomainRecordTimeout),
			Delete:  schema.DefaultTimeout(defaultDomainRecordTimeout),
			Default: schema.DefaultTimeout(defaultDomainRecordTimeout),
		},
		Importer: &schema.ResourceImporter{
			StateContext: schema.ImportStatePassthroughContext,
		},
		SchemaVersion: 0,
		Schema: map[string]*schema.Schema{
			"dns_zone": {
				Type:        schema.TypeString,
				Description: "The zone you want to add the record in",
				Required:    true,
				ForceNew:    true,
			},
			"keep_empty_zone": {
				Type:        schema.TypeBool,
				Description: "When destroy a resource record, if a zone have only NS, delete the zone",
				Optional:    true,
				Default:     false,
			},
			"root_zone": {
				Type:        schema.TypeBool,
				Description: "Does the DNS zone is the root zone or not",
				Computed:    true,
			},
			"name": {
				Type:        schema.TypeString,
				Description: "The name of the record",
				ForceNew:    true,
				Optional:    true,
				StateFunc: func(val interface{}) string {
					value := val.(string)
					if value == "@" {
						return ""
					}

					return value
				},
			},
			"type": {
				Type:             schema.TypeString,
				Description:      "The type of the record",
				ValidateDiagFunc: verify.ValidateEnum[domain.RecordType](),
				ForceNew:         true,
				Required:         true,
			},
			"data": {
				Type:        schema.TypeString,
				Description: "The data of the record",
				Required:    true,
			},
			"ttl": {
				Type:         schema.TypeInt,
				Description:  "The ttl of the record",
				Optional:     true,
				Default:      3600,
				ValidateFunc: validation.IntBetween(60, 2592000),
			},
			"priority": {
				Type:         schema.TypeInt,
				Description:  "The priority of the record",
				Optional:     true,
				Computed:     true,
				ValidateFunc: validation.IntAtLeast(0),
			},
			"geo_ip": {
				Type:          schema.TypeList,
				Description:   "Return record based on client localisation",
				Optional:      true,
				MaxItems:      1,
				ConflictsWith: []string{"view", "http_service", "weighted"},
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{
						"matches": {
							Type:        schema.TypeList,
							Description: "The list of matches",
							MinItems:    1,
							Required:    true,
							Elem: &schema.Resource{
								Schema: map[string]*schema.Schema{
									"countries": {
										Type:        schema.TypeList,
										Optional:    true,
										MinItems:    1,
										Description: "List of countries (eg: FR for France, US for the United States, GB for Great Britain...). List of all countries code: https://api.scaleway.com/domain-private/v2beta1/countries",
										Elem: &schema.Schema{
											Type:         schema.TypeString,
											ValidateFunc: validation.StringLenBetween(2, 2),
										},
									},
									"continents": {
										Type:        schema.TypeList,
										Optional:    true,
										MinItems:    1,
										Description: "List of continents (eg: EU for Europe, NA for North America, AS for Asia...). List of all continents code: https://api.scaleway.com/domain-private/v2beta1/continents",
										Elem: &schema.Schema{
											Type:         schema.TypeString,
											ValidateFunc: validation.StringLenBetween(2, 2),
										},
									},
									"data": {
										Type:        schema.TypeString,
										Description: "The data of the match result",
										Required:    true,
									},
								},
							},
						},
					},
				},
			},
			"http_service": {
				Type:          schema.TypeList,
				Description:   "Return record based on client localisation",
				Optional:      true,
				MaxItems:      1,
				ConflictsWith: []string{"geo_ip", "view", "weighted"},
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{
						"ips": {
							Type: schema.TypeList,
							Elem: &schema.Schema{
								Type:         schema.TypeString,
								ValidateFunc: validation.IsIPAddress,
							},
							Required:    true,
							MinItems:    1,
							Description: "IPs to check",
						},
						"must_contain": {
							Type:        schema.TypeString,
							Required:    true,
							Description: "Text to search",
						},
						"url": {
							Type:         schema.TypeString,
							ValidateFunc: validation.IsURLWithHTTPorHTTPS,
							Required:     true,
							Description:  "URL to match the must_contain text to validate an IP",
						},
						"user_agent": {
							Type:        schema.TypeString,
							Optional:    true,
							Description: "User-agent used when checking the URL",
						},
						"strategy": {
							Type:             schema.TypeString,
							Required:         true,
							Description:      "Strategy to return an IP from the IPs list",
							ValidateDiagFunc: verify.ValidateEnum[domain.RecordHTTPServiceConfigStrategy](),
						},
					},
				},
			},
			"view": {
				Type:          schema.TypeList,
				Description:   "Return record based on client subnet",
				Optional:      true,
				ConflictsWith: []string{"geo_ip", "http_service", "weighted"},
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{
						"subnet": {
							Type:         schema.TypeString,
							Description:  "The subnet of the view",
							Required:     true,
							ValidateFunc: validation.IsCIDR,
						},
						"data": {
							Type:        schema.TypeString,
							Description: "The data of the view record",
							Required:    true,
						},
					},
				},
			},
			"weighted": {
				Type:          schema.TypeList,
				Description:   "Return record based on weight",
				Optional:      true,
				ConflictsWith: []string{"geo_ip", "http_service", "view"},
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{
						"ip": {
							Type:         schema.TypeString,
							Description:  "The weighted IP",
							Required:     true,
							ValidateFunc: validation.IsIPAddress,
						},
						"weight": {
							Type:         schema.TypeInt,
							Description:  "The weight of the IP",
							Required:     true,
							ValidateFunc: validation.IntAtLeast(0),
						},
					},
				},
			},
			"fqdn": {
				Type:        schema.TypeString,
				Description: "The FQDN of the record",
				Computed:    true,
			},
			"project_id": account.ProjectIDSchema(),
		},
	}
}

func resourceRecordCreate(ctx context.Context, d *schema.ResourceData, m interface{}) diag.Diagnostics {
	domainAPI := NewDomainAPI(m)

	dnsZone := d.Get("dns_zone").(string)
	geoIP, okGeoIP := d.GetOk("geo_ip")
	recordType := domain.RecordType(d.Get("type").(string))
	recordData := d.Get("data").(string)
	record := &domain.Record{
		Data:              recordData,
		Name:              d.Get("name").(string),
		TTL:               uint32(d.Get("ttl").(int)),
		Type:              recordType,
		Priority:          uint32(d.Get("priority").(int)),
		GeoIPConfig:       expandDomainGeoIPConfig(d.Get("data").(string), geoIP, okGeoIP),
		HTTPServiceConfig: expandDomainHTTPService(d.GetOk("http_service")),
		WeightedConfig:    expandDomainWeighted(d.GetOk("weighted")),
		ViewConfig:        expandDomainView(d.GetOk("view")),
		Comment:           nil,
	}
	_, err := domainAPI.UpdateDNSZoneRecords(&domain.UpdateDNSZoneRecordsRequest{
		DNSZone: dnsZone,
		Changes: []*domain.RecordChange{
			{
				Add: &domain.RecordChangeAdd{
					Records: []*domain.Record{record},
				},
			},
		},
		ReturnAllRecords: scw.BoolPtr(false),
	})
	if err != nil {
		return diag.FromErr(err)
	}

	record, err = waitForDNSRecordExist(ctx, domainAPI, dnsZone, record.Name, record.Type, d.Timeout(schema.TimeoutCreate))
	if err != nil {
		return diag.FromErr(err)
	}

	tflog.Debug(ctx, fmt.Sprintf("DNS ZONE domain: %s record: %s, type: %s",
		dnsZone,
		record.Name,
		record.Type))

	dnsZoneData, err := domainAPI.ListDNSZoneRecords(&domain.ListDNSZoneRecordsRequest{
		DNSZone: dnsZone,
		Name:    d.Get("name").(string),
		Type:    recordType,
	}, scw.WithAllPages(), scw.WithContext(ctx))
	if err != nil {
		return diag.FromErr(err)
	}

	currentRecord, err := getRecordFromTypeAndData(recordType, recordData, dnsZoneData.Records)
	if err != nil {
		return diag.FromErr(err)
	}

	recordID := fmt.Sprintf("%s/%s", dnsZone, currentRecord.ID)

	d.SetId(recordID)
	tflog.Debug(ctx, fmt.Sprintf("record ID[%s]", recordID))
	return resourceDomainRecordRead(ctx, d, m)
}

func resourceDomainRecordRead(ctx context.Context, d *schema.ResourceData, m interface{}) diag.Diagnostics {
	domainAPI := NewDomainAPI(m)
	var record *domain.Record
	var dnsZone string
	var projectID string
	var err error

	currentData := d.Get("data")
	// check if this is an inline import. Like: "terraform import scaleway_domain_record.www subdomain.domain.tld/11111111-1111-1111-1111-111111111111"
	if strings.Contains(d.Id(), "/") {
		tab := strings.Split(d.Id(), "/")
		if len(tab) != 2 {
			return diag.FromErr(fmt.Errorf("cant parse record id: %s", d.Id()))
		}

		dnsZone = tab[0]
		recordID := tab[1]
		res, err := domainAPI.ListDNSZoneRecords(&domain.ListDNSZoneRecordsRequest{
			DNSZone: dnsZone,
			ID:      &recordID,
		}, scw.WithAllPages(), scw.WithContext(ctx))
		if err != nil {
			if httperrors.Is404(err) || httperrors.Is403(err) {
				d.SetId("")
				return nil
			}
			return diag.FromErr(err)
		}

		if len(res.Records) > 0 {
			record = res.Records[0]
		}
	} else {
		dnsZone = d.Get("dns_zone").(string)

		recordTypeRaw, recordTypeExist := d.GetOk("type")
		if !recordTypeExist {
			return diag.FromErr(errors.New("record type not found"))
		}
		recordType := domain.RecordType(recordTypeRaw.(string))
		if recordType == domain.RecordTypeUnknown {
			return diag.FromErr(errors.New("record type unknow"))
		}

		idRecord := locality.ExpandID(d.Id())
		res, err := domainAPI.ListDNSZoneRecords(&domain.ListDNSZoneRecordsRequest{
			DNSZone: dnsZone,
			Name:    d.Get("name").(string),
			Type:    recordType,
			ID:      &idRecord,
		}, scw.WithAllPages(), scw.WithContext(ctx))
		if err != nil {
			if httperrors.Is404(err) || httperrors.Is403(err) {
				d.SetId("")
				return nil
			}
			return diag.FromErr(err)
		}

		if len(res.Records) > 0 {
			record = res.Records[0]
		}
	}

	if record == nil {
		d.SetId("")
		return nil
	}

	dnsZones, err := domainAPI.ListDNSZones(&domain.ListDNSZonesRequest{DNSZones: []string{dnsZone}}, scw.WithAllPages(), scw.WithContext(ctx))
	if err != nil {
		if httperrors.Is404(err) || httperrors.Is403(err) {
			d.SetId("")
			return nil
		}
		return diag.FromErr(err)
	}

	// get the default first record
	projectID = dnsZones.DNSZones[0].ProjectID
	_ = d.Set("root_zone", dnsZones.DNSZones[0].Subdomain == "")

	// retrieve data from record
	if len(currentData.(string)) == 0 {
		currentData = flattenDomainData(record.Data, record.Type).(string)
	}

	d.SetId(record.ID)
	_ = d.Set("dns_zone", dnsZone)
	_ = d.Set("name", record.Name)
	_ = d.Set("type", record.Type.String())
	_ = d.Set("data", currentData.(string))
	_ = d.Set("ttl", int(record.TTL))
	_ = d.Set("priority", int(record.Priority))
	_ = d.Set("geo_ip", flattenDomainGeoIP(record.GeoIPConfig))
	_ = d.Set("http_service", flattenDomainHTTPService(record.HTTPServiceConfig))
	_ = d.Set("weighted", flattenDomainWeighted(record.WeightedConfig))
	_ = d.Set("view", flattenDomainView(record.ViewConfig))
	_ = d.Set("project_id", projectID)
	if record.Name == "" || record.Name == "@" {
		_ = d.Set("fqdn", dnsZone)
	} else {
		_ = d.Set("fqdn", fmt.Sprintf("%s.%s", record.Name, dnsZone))
	}
	return nil
}

func resourceDomainRecordUpdate(ctx context.Context, d *schema.ResourceData, m interface{}) diag.Diagnostics {
	if !d.HasChanges(changeKeys...) {
		return resourceDomainRecordRead(ctx, d, m)
	}

	domainAPI := NewDomainAPI(m)

	req := &domain.UpdateDNSZoneRecordsRequest{
		DNSZone:          d.Get("dns_zone").(string),
		ReturnAllRecords: scw.BoolPtr(false),
	}

	geoIP, okGeoIP := d.GetOk("geo_ip")
	record := &domain.Record{
		Name:              d.Get("name").(string),
		Data:              d.Get("data").(string),
		Priority:          uint32(d.Get("priority").(int)),
		TTL:               uint32(d.Get("ttl").(int)),
		Type:              domain.RecordType(d.Get("type").(string)),
		GeoIPConfig:       expandDomainGeoIPConfig(d.Get("data").(string), geoIP, okGeoIP),
		HTTPServiceConfig: expandDomainHTTPService(d.GetOk("http_service")),
		WeightedConfig:    expandDomainWeighted(d.GetOk("weighted")),
		ViewConfig:        expandDomainView(d.GetOk("view")),
	}

	req.Changes = []*domain.RecordChange{
		{
			Set: &domain.RecordChangeSet{
				ID:      scw.StringPtr(locality.ExpandID(d.Id())),
				Records: []*domain.Record{record},
			},
		},
	}

	_, err := domainAPI.UpdateDNSZoneRecords(req)
	if err != nil {
		return diag.FromErr(err)
	}

	_, err = waitForDNSRecordExist(ctx, domainAPI, d.Get("dns_zone").(string), record.Name, record.Type, d.Timeout(schema.TimeoutUpdate))
	if err != nil {
		return diag.FromErr(err)
	}

	return resourceDomainRecordRead(ctx, d, m)
}

func resourceDomainRecordDelete(ctx context.Context, d *schema.ResourceData, m interface{}) diag.Diagnostics {
	domainAPI := NewDomainAPI(m)

	recordID := locality.ExpandID(d.Id())
	_, err := domainAPI.UpdateDNSZoneRecords(&domain.UpdateDNSZoneRecordsRequest{
		DNSZone: d.Get("dns_zone").(string),
		Changes: []*domain.RecordChange{
			{
				Delete: &domain.RecordChangeDelete{
					ID: &recordID,
				},
			},
		},
		ReturnAllRecords: scw.BoolPtr(false),
	})
	if err != nil {
		return diag.FromErr(err)
	}
	d.SetId("")

	// for non-root zone, if the zone have only NS records, then delete the zone
	if d.Get("keep_empty_zone").(bool) || d.Get("root_zone").(bool) {
		return nil
	}

	res, err := domainAPI.ListDNSZoneRecords(&domain.ListDNSZoneRecordsRequest{
		DNSZone: d.Get("dns_zone").(string),
	})
	if err != nil {
		if httperrors.Is404(err) || httperrors.Is403(err) {
			return nil
		}
		return diag.FromErr(err)
	}

	for _, r := range res.Records {
		if r.Type != domain.RecordTypeNS {
			// The zone isn't empty, keep it
			return nil
		}
		tflog.Debug(ctx, fmt.Sprintf("record [%s], type [%s]", r.Name, r.Type))
	}

	_, err = waitForDNSZone(ctx, domainAPI, d.Get("dns_zone").(string), d.Timeout(schema.TimeoutDelete))
	if err != nil {
		if httperrors.Is404(err) || httperrors.Is403(err) {
			return nil
		}
		return diag.FromErr(err)
	}

	_, err = domainAPI.DeleteDNSZone(&domain.DeleteDNSZoneRequest{
		DNSZone:   d.Get("dns_zone").(string),
		ProjectID: d.Get("project_id").(string),
	})
	if err != nil {
		if httperrors.Is404(err) || httperrors.Is403(err) {
			return nil
		}
		return diag.FromErr(err)
	}

	return nil
}