diff-processor: add doc detector for ephemeral attributes (#15075)

Author: ramonvermeulen

tools/diff-processor/documentparser/document_parser.go

@@ -66,16 +66,19 @@ func traverse(paths *[]string, path string, n *node) {
 // Parse parse a resource document markdown's arguments and attributes section.
 // The parsed file format is defined in mmv1/templates/terraform/resource.html.markdown.tmpl.
 func (d *DocumentParser) Parse(src []byte) error {
-	var argument, attribute string
+	var argument, attribute, ephemeralAttribute string
 	for _, p := range strings.Split(string(src), "\n"+sectionSeparator) {
 		if strings.HasPrefix(p, "Attributes Reference") {
 			attribute = p
 		}
 		if strings.HasPrefix(p, "Argument Reference") {
 			argument = p
 		}
+		if strings.HasPrefix(p, "Ephemeral Attributes Reference") {
+			ephemeralAttribute = p
+		}
 	}
-	for _, text := range []string{argument, attribute} {
+	for _, text := range []string{argument, attribute, ephemeralAttribute} {
 		if len(text) != 0 {
 			sections := horizontalLineRegex.Split(text, -1)
 			var allTopLevelFieldSections string

tools/diff-processor/documentparser/document_parser_test.go

@@ -78,6 +78,10 @@ func TestParse(t *testing.T) {
 		"workload_identity_config.issuer_uri",
 		"workload_identity_config.workload_pool",
 		"errors.message",
+		// The below are from the ephemeral attributes section.
+		"shared_secret_wo",
+		"sensitive_params",
+		"sensitive_params.secret_access_key_wo",
 	}
 	got := parser.FlattenFields()
 	// gotAttributes := parser.Attributes()

tools/diff-processor/testdata/resource.html.markdown

@@ -275,6 +275,34 @@ exported:
   (Optional)
   Human-friendly description of the error.
 
+## Ephemeral Attributes Reference
+
+The following write-only attributes are supported:
+
+* `shared_secret_wo` -
+  (Optional)
+  Shared secret used to set the secure session between the Cloud VPN
+  gateway and the peer VPN gateway.
+  Note: This property is write-only and will not be read from the API. For more info see [updating write-only attributes](/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
+  **Note**: This property is write-only and will not be read from the API.
+
+* `sensitive_params` -
+  (Optional)
+  Different parameters are configured primarily using the the `params` field on this
+  resource. This block contains the parameters which contain secrets or passwords so that they can be marked
+  sensitive and hidden from plan output. The name of the field, eg: secret_access_key, will be the key
+  in the `params` map in the api request.
+  Credentials may not be specified in both locations and will cause an error. Changing from one location
+  to a different credential configuration in the config will require an apply to update state.
+  Structure is [documented below](#nested_sensitive_params).
+
+<a name="nested_sensitive_params"></a>The `sensitive_params` block supports:
+
+* `secret_access_key_wo` -
+  (Optional)
+  The Secret Access Key of the AWS account transferring data from.
+  **Note**: This property is write-only and will not be read from the API.
+
 ## Timeouts
 
 Lorem ipsum