initial simplified version of the terraform provider

[wasaga]

Related:

• https://linear.app/pomerium/issue/ENG-1729/support-route-configuration-via-terraform-provider
• https://linear.app/pomerium/issue/ENG-1730/support-policy-configuration-via-terraform-provider

given the following terraform:

terraform {
    required_providers {
        pomerium = {
            source = "github.com/pomerium/enterprise-terraform-provider"
            version = "0.0.1"
        }
    }
}

variable "pomerium_service_account_token" {
    type = string
    sensitive = true
}

provider "pomerium" {
    api_url = "https://console-api.localhost.pomerium.io"
    tls_insecure_skip_verify = true
    service_account_token = var.pomerium_service_account_token
}

resource "pomerium_namespace" "test_namespace" {
  name = "test-namespace"
  parent_id = "9d8dbd2c-8cce-4e66-9c1f-c490b4a07243"
}

resource "pomerium_policy" "test_policy" {
  name         = "test-policy"
  namespace_id = pomerium_namespace.test_namespace.id
  ppl          = <<EOF
- allow:
    and:
        - authenticated_user: true
EOF
}

resource "pomerium_route" "test_route" {
  name         = "test-route"
  namespace_id = pomerium_namespace.test_namespace.id
  from         = "https://verify-tf.localhost.pomerium.io"
  to           = ["https://verify.pomerium.com"]
  policies     = [pomerium_policy.test_policy.id]
}

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # pomerium_namespace.test_namespace will be created
  + resource "pomerium_namespace" "test_namespace" {
      + id        = (known after apply)
      + name      = "test-namespace"
      + parent_id = "9d8dbd2c-8cce-4e66-9c1f-c490b4a07243"
    }

  # pomerium_policy.test_policy will be created
  + resource "pomerium_policy" "test_policy" {
      + id           = (known after apply)
      + name         = "test-policy"
      + namespace_id = (known after apply)
      + ppl          = <<-EOT
            - allow:
                and:
                    - authenticated_user: true
        EOT
    }

  # pomerium_route.test_route will be created
  + resource "pomerium_route" "test_route" {
      + from         = "https://verify-tf.localhost.pomerium.io"
      + id           = (known after apply)
      + name         = "test-route"
      + namespace_id = (known after apply)
      + policies     = [
          + (known after apply),
        ]
      + to           = [
          + "https://verify.pomerium.com",
        ]
    }

Plan: 3 to add, 0 to change, 0 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

pomerium_namespace.test_namespace: Creating...
pomerium_namespace.test_namespace: Creation complete after 0s [id=0f075734-e379-4816-a160-e7a3f34abf80]
pomerium_policy.test_policy: Creating...
pomerium_policy.test_policy: Creation complete after 0s [id=45c0c353-7821-4761-8595-fd9559e4319d]
pomerium_route.test_route: Creating...
pomerium_route.test_route: Creation complete after 0s [id=681a7403-fa69-4ee6-adff-e7af8ff52a21]

Apply complete! Resources: 3 added, 0 changed, 0 destroyed.