Merge branch 'stackitcloud:main' into main

Author: PatrickKoss

.github/CODEOWNERS

@@ -0,0 +1 @@
+*   @marceljk @bahkauv70 @Fyusel @rubenhoenle

CONTRIBUTION.md

@@ -124,7 +124,7 @@ func (r *barResource) Configure(ctx context.Context, req resource.ConfigureReque
 	} else {
 		apiClient, err = foo.NewAPIClient(
 			config.WithCustomAuth(providerData.RoundTripper),
-			config.WithRegion(providerData.Region),
+			config.WithRegion(providerData.DefaultRegion),
 		)
 	}
 

README.md

@@ -172,6 +172,25 @@ To use beta resources in the STACKIT Terraform provider, follow these steps:
 
 For more details, please refer to the [beta resources configuration guide](https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources).
 
+## Opting into Experiments
+
+Experiments are features that are even less mature and stable than Beta Resources. While there is some assumed stability in beta resources, will have to expect breaking changes while using experimental resources. Experimental Resources do not come with any support or warranty.
+
+To enable experiments set the experiments field in the provider definition:
+
+```hcl
+provider "stackit" {
+  region                = "eu01"
+  experiments           = ["iam"]
+}
+```
+
+### Available Experiments
+
+#### `iam`
+
+Enables IAM management features in the Terraform provider. The underlying IAM API is expected to undergo a redesign in the future, which leads to it being considered experimental.
+
 ## Acceptance Tests
 
 Terraform acceptance tests are run using the command `make test-acceptance-tf`. For all services,

docs/data-sources/objectstorage_bucket.md

@@ -26,6 +26,9 @@ data "stackit_objectstorage_bucket" "example" {
 
 - `name` (String) The bucket name. It must be DNS conform.
 - `project_id` (String) STACKIT Project ID to which the bucket is associated.
+
+### Optional
+
 - `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only

docs/data-sources/objectstorage_credential.md

@@ -28,6 +28,9 @@ data "stackit_objectstorage_credentials_group" "example" {
 - `credential_id` (String) The credential ID.
 - `credentials_group_id` (String) The credential group ID.
 - `project_id` (String) STACKIT Project ID to which the credential group is associated.
+
+### Optional
+
 - `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only

docs/data-sources/objectstorage_credentials_group.md

@@ -25,12 +25,12 @@ data "stackit_objectstorage_credentials_group" "example" {
 ### Required
 
 - `project_id` (String) Object Storage Project ID to which the credentials group is associated.
-- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Optional
 
 - `credentials_group_id` (String) The credentials group ID.
 - `name` (String) The credentials group's display name.
+- `region` (String) The resource region. If not defined, the provider region is used.
 
 ### Read-Only
 

docs/data-sources/public_ip_ranges.md

@@ -0,0 +1,35 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "stackit_public_ip_ranges Data Source - stackit"
+subcategory: ""
+description: |-
+  A list of all public IP ranges that STACKIT uses.
+  ~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources for how to opt-in to use beta resources.
+---
+
+# stackit_public_ip_ranges (Data Source)
+
+A list of all public IP ranges that STACKIT uses.
+
+~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our [guide](https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources) for how to opt-in to use beta resources.
+
+## Example Usage
+
+```terraform
+data "stackit_public_ip_ranges" "example" {}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Read-Only
+
+- `id` (String) Terraform's internal resource ID. It takes the values of "`public_ip_ranges.*.cidr`".
+- `public_ip_ranges` (Attributes List) A list of all public IP ranges. (see [below for nested schema](#nestedatt--public_ip_ranges))
+
+<a id="nestedatt--public_ip_ranges"></a>
+### Nested Schema for `public_ip_ranges`
+
+Read-Only:
+
+- `cidr` (String) Classless Inter-Domain Routing (CIDR)

docs/data-sources/sqlserverflex_instance.md

@@ -27,12 +27,16 @@ data "stackit_sqlserverflex_instance" "example" {
 - `instance_id` (String) ID of the SQLServer Flex instance.
 - `project_id` (String) STACKIT project ID to which the instance is associated.
 
+### Optional
+
+- `region` (String) The resource region. If not defined, the provider region is used.
+
 ### Read-Only
 
 - `acl` (List of String) The Access Control List (ACL) for the SQLServer Flex instance.
 - `backup_schedule` (String) The backup schedule. Should follow the cron scheduling system format (e.g. "0 0 * * *").
 - `flavor` (Attributes) (see [below for nested schema](#nestedatt--flavor))
-- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`instance_id`".
+- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`region`,`instance_id`".
 - `name` (String) Instance name.
 - `options` (Attributes) Custom parameters for the SQLServer Flex instance. (see [below for nested schema](#nestedatt--options))
 - `replicas` (Number)

docs/data-sources/sqlserverflex_user.md

@@ -29,10 +29,14 @@ data "stackit_sqlserverflex_user" "example" {
 - `project_id` (String) STACKIT project ID to which the instance is associated.
 - `user_id` (String) User ID.
 
+### Optional
+
+- `region` (String) The resource region. If not defined, the provider region is used.
+
 ### Read-Only
 
 - `host` (String)
-- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`instance_id`,`user_id`".
+- `id` (String) Terraform's internal data source. ID. It is structured as "`project_id`,`region`,`instance_id`,`user_id`".
 - `port` (Number)
-- `roles` (Set of String) Database access levels for the user. Possible values: [`##STACKIT_LoginManager##`, `##STACKIT_DatabaseManager##`]
+- `roles` (Set of String) Database access levels for the user.
 - `username` (String) Username of the SQLServer Flex instance.

docs/index.md

@@ -154,8 +154,10 @@ Note: AWS specific checks must be skipped as they do not work on STACKIT. For de
 - `argus_custom_endpoint` (String, Deprecated) Custom endpoint for the Argus service
 - `authorization_custom_endpoint` (String) Custom endpoint for the Membership service
 - `credentials_path` (String) Path of JSON from where the credentials are read. Takes precedence over the env var `STACKIT_CREDENTIALS_PATH`. Default value is `~/.stackit/credentials.json`.
+- `default_region` (String) Region will be used as the default location for regional services. Not all services require a region, some are global
 - `dns_custom_endpoint` (String) Custom endpoint for the DNS service
 - `enable_beta_resources` (Boolean) Enable beta resources. Default is false.
+- `experiments` (List of String) Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: [iam]
 - `iaas_custom_endpoint` (String) Custom endpoint for the IaaS service
 - `loadbalancer_custom_endpoint` (String) Custom endpoint for the Load Balancer service
 - `logme_custom_endpoint` (String) Custom endpoint for the LogMe service
@@ -169,7 +171,7 @@ Note: AWS specific checks must be skipped as they do not work on STACKIT. For de
 - `private_key_path` (String) Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
 - `rabbitmq_custom_endpoint` (String) Custom endpoint for the RabbitMQ service
 - `redis_custom_endpoint` (String) Custom endpoint for the Redis service
-- `region` (String) Region will be used as the default location for regional services. Not all services require a region, some are global
+- `region` (String, Deprecated) Region will be used as the default location for regional services. Not all services require a region, some are global
 - `resourcemanager_custom_endpoint` (String) Custom endpoint for the Resource Manager service
 - `secretsmanager_custom_endpoint` (String) Custom endpoint for the Secrets Manager service
 - `server_backup_custom_endpoint` (String) Custom endpoint for the Server Backup service