resource_github_organization_webhook.go

package github

import (
	"context"
	"errors"
	"log"
	"net/http"
	"strconv"

	"github.com/google/go-github/v82/github"
	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
)

func resourceGithubOrganizationWebhook() *schema.Resource {
	return &schema.Resource{
		CreateContext: resourceGithubOrganizationWebhookCreate,
		ReadContext:   resourceGithubOrganizationWebhookRead,
		UpdateContext: resourceGithubOrganizationWebhookUpdate,
		DeleteContext: resourceGithubOrganizationWebhookDelete,
		Importer: &schema.ResourceImporter{
			StateContext: schema.ImportStatePassthroughContext,
		},

		SchemaVersion: 1,
		StateUpgraders: []schema.StateUpgrader{
			{
				Type:    resourceGithubOrganizationWebhookResourceV0().CoreConfigSchema().ImpliedType(),
				Upgrade: resourceGithubOrganizationWebhookInstanceStateUpgradeV0,
				Version: 0,
			},
		},

		Schema: map[string]*schema.Schema{
			"events": {
				Type:        schema.TypeSet,
				Required:    true,
				Description: "A list of events which should trigger the webhook.",
				Elem:        &schema.Schema{Type: schema.TypeString},
				Set:         schema.HashString,
			},
			"configuration": webhookConfigurationSchema(),
			"url": {
				Type:        schema.TypeString,
				Computed:    true,
				Description: "URL of the webhook.",
			},
			"active": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     true,
				Description: "Indicate if the webhook should receive events.",
			},
			"etag": {
				Type:     schema.TypeString,
				Optional: true,
				Computed: true,
				DiffSuppressFunc: func(k, o, n string, d *schema.ResourceData) bool {
					return true
				},
				DiffSuppressOnRefresh: true,
			},
		},
	}
}

func resourceGithubOrganizationWebhookObject(d *schema.ResourceData) *github.Hook {
	events := []string{}
	eventSet := d.Get("events").(*schema.Set)
	for _, v := range eventSet.List() {
		events = append(events, v.(string))
	}

	hook := &github.Hook{
		URL:    github.Ptr(d.Get("url").(string)),
		Events: events,
		Active: github.Ptr(d.Get("active").(bool)),
	}

	config := d.Get("configuration").([]any)
	if len(config) > 0 {
		hook.Config = webhookConfigFromInterface(config[0].(map[string]any))
	}

	return hook
}

func resourceGithubOrganizationWebhookCreate(ctx context.Context, d *schema.ResourceData, meta any) diag.Diagnostics {
	err := checkOrganization(meta)
	if err != nil {
		return diag.FromErr(err)
	}

	client := meta.(*Owner).v3client

	orgName := meta.(*Owner).name
	webhookObj := resourceGithubOrganizationWebhookObject(d)

	hook, _, err := client.Organizations.CreateHook(ctx, orgName, webhookObj)
	if err != nil {
		return diag.FromErr(err)
	}
	d.SetId(strconv.FormatInt(hook.GetID(), 10))

	// GitHub returns the secret as a string of 8 astrisks "********"
	// We would prefer to store the real secret in state, so we'll
	// write the configuration secret in state from our request to GitHub
	if hook.Config.Secret != nil {
		hook.Config.Secret = webhookObj.Config.Secret
	}

	if err = d.Set("configuration", interfaceFromWebhookConfig(hook.Config)); err != nil {
		return diag.FromErr(err)
	}

	return resourceGithubOrganizationWebhookRead(ctx, d, meta)
}

func resourceGithubOrganizationWebhookRead(ctx context.Context, d *schema.ResourceData, meta any) diag.Diagnostics {
	err := checkOrganization(meta)
	if err != nil {
		return diag.FromErr(err)
	}

	client := meta.(*Owner).v3client

	orgName := meta.(*Owner).name
	hookID, err := strconv.ParseInt(d.Id(), 10, 64)
	if err != nil {
		return diag.FromErr(unconvertibleIdErr(d.Id(), err))
	}
	ctx = context.WithValue(ctx, ctxId, d.Id())
	if !d.IsNewResource() {
		ctx = context.WithValue(ctx, ctxEtag, d.Get("etag").(string))
	}

	hook, resp, err := client.Organizations.GetHook(ctx, orgName, hookID)
	if err != nil {
		var ghErr *github.ErrorResponse
		if errors.As(err, &ghErr) {
			if ghErr.Response.StatusCode == http.StatusNotModified {
				return nil
			}
			if ghErr.Response.StatusCode == http.StatusNotFound {
				log.Printf("[INFO] Removing organization webhook %s/%s from state because it no longer exists in GitHub",
					orgName, d.Id())
				d.SetId("")
				return nil
			}
		}
		return diag.FromErr(err)
	}

	if err = d.Set("etag", resp.Header.Get("ETag")); err != nil {
		return diag.FromErr(err)
	}
	if err = d.Set("url", hook.GetURL()); err != nil {
		return diag.FromErr(err)
	}
	if err = d.Set("active", hook.GetActive()); err != nil {
		return diag.FromErr(err)
	}
	if err = d.Set("events", hook.Events); err != nil {
		return diag.FromErr(err)
	}

	// GitHub returns the secret as a string of 8 astrisks "********"
	// We would prefer to store the real secret in state, so we'll
	// write the configuration secret in state from what we get from
	// ResourceData
	if len(d.Get("configuration").([]any)) > 0 {
		currentSecret := d.Get("configuration").([]any)[0].(map[string]any)["secret"]

		if hook.Config.Secret != nil {
			hook.Config.Secret = github.Ptr(currentSecret.(string))
		}
	}

	if err = d.Set("configuration", interfaceFromWebhookConfig(hook.Config)); err != nil {
		return diag.FromErr(err)
	}

	return nil
}

func resourceGithubOrganizationWebhookUpdate(ctx context.Context, d *schema.ResourceData, meta any) diag.Diagnostics {
	err := checkOrganization(meta)
	if err != nil {
		return diag.FromErr(err)
	}

	client := meta.(*Owner).v3client

	orgName := meta.(*Owner).name
	webhookObj := resourceGithubOrganizationWebhookObject(d)
	hookID, err := strconv.ParseInt(d.Id(), 10, 64)
	if err != nil {
		return diag.FromErr(unconvertibleIdErr(d.Id(), err))
	}
	ctx = context.WithValue(ctx, ctxId, d.Id())

	_, _, err = client.Organizations.EditHook(ctx,
		orgName, hookID, webhookObj)
	if err != nil {
		return diag.FromErr(err)
	}

	return resourceGithubOrganizationWebhookRead(ctx, d, meta)
}

func resourceGithubOrganizationWebhookDelete(ctx context.Context, d *schema.ResourceData, meta any) diag.Diagnostics {
	err := checkOrganization(meta)
	if err != nil {
		return diag.FromErr(err)
	}

	client := meta.(*Owner).v3client

	orgName := meta.(*Owner).name
	hookID, err := strconv.ParseInt(d.Id(), 10, 64)
	if err != nil {
		return diag.FromErr(unconvertibleIdErr(d.Id(), err))
	}
	ctx = context.WithValue(ctx, ctxId, d.Id())

	_, err = client.Organizations.DeleteHook(ctx, orgName, hookID)
	return diag.FromErr(err)
}

func webhookConfigFromInterface(config map[string]any) *github.HookConfig {
	hookConfig := &github.HookConfig{}
	if config["url"] != nil {
		hookConfig.URL = github.Ptr(config["url"].(string))
	}
	if config["content_type"] != nil {
		hookConfig.ContentType = github.Ptr(config["content_type"].(string))
	}
	if config["insecure_ssl"] != nil {
		if insecureSsl, ok := config["insecure_ssl"].(bool); ok {
			if insecureSsl {
				hookConfig.InsecureSSL = github.Ptr("1")
			} else {
				hookConfig.InsecureSSL = github.Ptr("0")
			}
		} else {
			if config["insecure_ssl"] == "1" || config["insecure_ssl"] == "true" {
				hookConfig.InsecureSSL = github.Ptr("1")
			} else {
				hookConfig.InsecureSSL = github.Ptr("0")
			}
		}
	}
	if config["secret"] != nil {
		hookConfig.Secret = github.Ptr(config["secret"].(string))
	}
	return hookConfig
}

func interfaceFromWebhookConfig(config *github.HookConfig) []any {
	cfg := map[string]any{}
	if config.URL != nil {
		cfg["url"] = *config.URL
	}
	if config.ContentType != nil {
		cfg["content_type"] = *config.ContentType
	}
	if config.InsecureSSL != nil {
		cfg["insecure_ssl"] = *config.InsecureSSL == "1"
	}
	if config.Secret != nil {
		cfg["secret"] = *config.Secret
	}
	return []any{cfg}
}