resource_federated_identity: migrate to plugin framework

Updates #37240

Also adds validation on custom claims

Signed-off-by: Danni Popova <danni@tailscale.com>

Author: danni-popova

tailscale/provider_framework.go

@@ -160,6 +160,7 @@ func (p *tailscaleProvider) Resources(_ context.Context) []func() resource.Resou
 		NewAWSExternalIDResource,
 		NewDeviceKeyResource,
 		NewDeviceSubnetRoutesResource,
+		NewFederatedIdentityResource,
 	}
 }
 

tailscale/provider_sdk.go

@@ -108,7 +108,6 @@ func Provider(options ...ProviderOption) *schema.Provider {
 			"tailscale_posture_integration":     resourcePostureIntegration(),
 			"tailscale_logstream_configuration": resourceLogstreamConfiguration(),
 			"tailscale_tailnet_settings":        resourceTailnetSettings(),
-			"tailscale_federated_identity":      resourceFederatedIdentity(),
 			"tailscale_service":                 resourceService(),
 		},
 		DataSourcesMap: map[string]*schema.Resource{

tailscale/provider_test.go

@@ -106,6 +106,7 @@ func testProviderFactories(t *testing.T) map[string]func() (tfprotov5.ProviderSe
 			ctx := context.Background()
 
 			t.Setenv("TAILSCALE_API_KEY", "api_123")
+			t.Setenv("TAILSCALE_BASE_URL", testClient.BaseURL.String())
 
 			providers := []func() tfprotov5.ProviderServer{
 				providerserver.NewProtocol5(NewFrameworkProvider()),