feat(lb): add support for http_filter_option

docs/resources/lb_frontend.md

@@ -109,6 +109,19 @@ resource "scaleway_lb_frontend" "frontend01" {
       invert            = "true"
     }
   }
+
+  # Allow upstream http requests that have an HTTP header "foo" that matches "bar"
+  acl {
+    action {
+      type = "allow"
+    }
+
+    match {
+      http_filter       = "http_header_match"
+      http_filter_value = "foo"
+      http_value_option = "bar"
+    }
+  }
 }
 ```
 
@@ -148,9 +161,12 @@ The following arguments are supported:
 
     - `http_filter` - (Optional) The HTTP filter to match. This filter is supported only if your backend protocol has an HTTP forward protocol.
        It extracts the request's URL path, which starts at the first slash and ends before the question mark (without the host part).
-       Possible values are: `acl_http_filter_none`, `path_begin`, `path_end` or `regex`.
+       Possible values are: `acl_http_filter_none`, `path_begin`, `path_end`, `http_header_match` or `regex`.
 
     - `http_filter_value` - (Optional) A list of possible values to match for the given HTTP filter.
+      Keep in mind that in the case of `http_header_match` the HTTP header field name is case-insensitive.
+
+    - `http_value_option` - (Optional) If you have `http_filter` at `http_header_match`, you can use this field to filter on the HTTP header's value.
 
     - `invert` - (Optional) If set to `true`, the condition will be of type "unless".
 

scaleway/helpers_lb.go

@@ -211,10 +211,11 @@ func expandLbACLAction(raw interface{}) *lbSDK.ACLAction {
 func flattenLbACLMatch(match *lbSDK.ACLMatch) interface{} {
 	return []map[string]interface{}{
 		{
-			"ip_subnet":         flattenSliceStringPtr(match.IPSubnet),
-			"http_filter":       match.HTTPFilter.String(),
-			"http_filter_value": flattenSliceStringPtr(match.HTTPFilterValue),
-			"invert":            match.Invert,
+			"ip_subnet":          flattenSliceStringPtr(match.IPSubnet),
+			"http_filter":        match.HTTPFilter.String(),
+			"http_filter_value":  flattenSliceStringPtr(match.HTTPFilterValue),
+			"http_filter_option": match.HTTPFilterOption,
+			"invert":             match.Invert,
 		},
 	}
 }
@@ -232,10 +233,11 @@ func expandLbACLMatch(raw interface{}) *lbSDK.ACLMatch {
 	}
 
 	return &lbSDK.ACLMatch{
-		IPSubnet:        ipSubnet,
-		HTTPFilter:      lbSDK.ACLHTTPFilter(rawMap["http_filter"].(string)),
-		HTTPFilterValue: expandSliceStringPtr(rawMap["http_filter_value"].([]interface{})),
-		Invert:          rawMap["invert"].(bool),
+		IPSubnet:         ipSubnet,
+		HTTPFilter:       lbSDK.ACLHTTPFilter(rawMap["http_filter"].(string)),
+		HTTPFilterValue:  expandSliceStringPtr(rawMap["http_filter_value"].([]interface{})),
+		HTTPFilterOption: expandStringPtr(rawMap["http_filter_option"].(string)),
+		Invert:           rawMap["invert"].(bool),
 	}
 }
 

scaleway/resource_lb_acl_test.go

@@ -90,6 +90,19 @@ func TestAccScalewayLbAcl_Basic(t *testing.T) {
 								type = "deny"
 							}
 						}
+
+						acl {
+							match {
+								ip_subnet = ["0.0.0.0/0"]
+								http_filter = "http_header_match"
+								http_filter_value = ["example.com"]
+								http_filter_option = "host"
+							}
+
+							action {
+								type = "allow"
+							}
+						}
 					}
 				`,
 				Check: resource.ComposeTestCheckFunc(
@@ -139,6 +152,15 @@ func TestAccScalewayLbAcl_Basic(t *testing.T) {
 							},
 							Action: &lbSDK.ACLAction{Type: lbSDK.ACLActionTypeDeny},
 						},
+						{
+							Match: &lbSDK.ACLMatch{
+								IPSubnet:         scw.StringSlicePtr([]string{"0.0.0.0/0"}),
+								HTTPFilter:       lbSDK.ACLHTTPFilterHTTPHeaderMatch,
+								HTTPFilterValue:  scw.StringSlicePtr([]string{"example.com"}),
+								HTTPFilterOption: scw.StringPtr("host"),
+							},
+							Action: &lbSDK.ACLAction{Type: lbSDK.ACLActionTypeAllow},
+						},
 					}),
 				),
 			},

scaleway/resource_lb_frontend.go

@@ -135,6 +135,7 @@ func resourceScalewayLbFrontend() *schema.Resource {
 											lbSDK.ACLHTTPFilterPathBegin.String(),
 											lbSDK.ACLHTTPFilterPathEnd.String(),
 											lbSDK.ACLHTTPFilterRegex.String(),
+											lbSDK.ACLHTTPFilterHTTPHeaderMatch.String(),
 										}, false),
 										Description: "The HTTP filter to match",
 									},
@@ -146,6 +147,11 @@ func resourceScalewayLbFrontend() *schema.Resource {
 											Type: schema.TypeString,
 										},
 									},
+									"http_filter_option": {
+										Type:        schema.TypeString,
+										Optional:    true,
+										Description: "You can use this field with http_header_match acl type to set the header name to filter",
+									},
 									"invert": {
 										Type:        schema.TypeBool,
 										Optional:    true,