Skip to content

Commit a70de00

Browse files
Release/0.10.0 (#90)
* Feat: event gateway policies with oneof split (#89) * OpenAPI changes * Generated provider and docs * Update tests * OpenAPI changes to policy names * Generated provider, docs and examples * tests: fix smoke test configs for cluster policy * Update CHANGELOG.md * chore: prep for release
1 parent 0cea62a commit a70de00

File tree

246 files changed

+35233
-1023
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

246 files changed

+35233
-1023
lines changed

.speakeasy/gen.lock

Lines changed: 948 additions & 14 deletions
Large diffs are not rendered by default.

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,11 @@
11
# Changelog
22

3+
## 0.10.0
4+
> Released on 2025/10/08
5+
6+
### Features
7+
* Add support for inbound fault injection configuration in `konnect_mesh_fault_injection` resource
8+
39
## 0.9.0
410
> Released on 2025/10/02
511

docs/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ terraform {
1717
required_providers {
1818
konnect-beta = {
1919
source = "kong/konnect-beta"
20-
version = "0.9.0"
20+
version = "0.10.0"
2121
}
2222
}
2323
}
Lines changed: 114 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,114 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "konnect_event_gateway_cluster_policy_acls Resource - terraform-provider-konnect-beta"
4+
subcategory: ""
5+
description: |-
6+
EventGatewayClusterPolicyAcls Resource
7+
---
8+
9+
# konnect_event_gateway_cluster_policy_acls (Resource)
10+
11+
EventGatewayClusterPolicyAcls Resource
12+
13+
## Example Usage
14+
15+
```terraform
16+
resource "konnect_event_gateway_cluster_policy_acls" "my_eventgatewayclusterpolicyacls" {
17+
provider = konnect-beta
18+
condition = "context.topic.name.endsWith('my_suffix')"
19+
config = {
20+
rules = [
21+
{
22+
action = "deny"
23+
operations = [
24+
{
25+
name = "idempotent_write"
26+
}
27+
]
28+
resource_names = [
29+
{
30+
match = "...my_match..."
31+
}
32+
]
33+
resource_type = "transactional_id"
34+
}
35+
]
36+
}
37+
description = "...my_description..."
38+
enabled = false
39+
gateway_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"
40+
labels = {
41+
key = "value"
42+
}
43+
name = "...my_name..."
44+
parent_policy_id = "528824ff-4d3e-47af-9e16-af5bb53cc0fa"
45+
virtual_cluster_id = "4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e"
46+
}
47+
```
48+
49+
<!-- schema generated by tfplugindocs -->
50+
## Schema
51+
52+
### Required
53+
54+
- `config` (Attributes) Apply ACLs to virtual cluster traffic. (see [below for nested schema](#nestedatt--config))
55+
- `gateway_id` (String) The UUID of your Gateway.
56+
- `virtual_cluster_id` (String) The ID of the Virtual Cluster.
57+
58+
### Optional
59+
60+
- `condition` (String) A string containing the boolean expression that determines whether the policy is applied.
61+
- `description` (String) A human-readable description of the policy.
62+
- `enabled` (Boolean) Whether the policy is enabled. Default: true
63+
- `labels` (Map of String) Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
64+
65+
Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
66+
- `name` (String) A unique user-defined name of the policy.
67+
- `parent_policy_id` (String) When specified, it sets the ID of the parent policy. Requires replacement if changed.
68+
69+
### Read-Only
70+
71+
- `created_at` (String) An ISO-8601 timestamp representation of entity creation date.
72+
- `id` (String) The unique identifier of the policy.
73+
- `updated_at` (String) An ISO-8601 timestamp representation of entity update date.
74+
75+
<a id="nestedatt--config"></a>
76+
### Nested Schema for `config`
77+
78+
Required:
79+
80+
- `rules` (Attributes List) Every ACL rule in this list applies independently. (see [below for nested schema](#nestedatt--config--rules))
81+
82+
<a id="nestedatt--config--rules"></a>
83+
### Nested Schema for `config.rules`
84+
85+
Required:
86+
87+
- `action` (String) How to handle the request if the rule matches. must be one of ["allow", "deny"]
88+
- `operations` (Attributes List) Types of Kafka operations to match against. Note that not every operation can apply to every resource type. (see [below for nested schema](#nestedatt--config--rules--operations))
89+
- `resource_names` (Attributes List) If any of these entries match, the resource name matches for this rule. (see [below for nested schema](#nestedatt--config--rules--resource_names))
90+
- `resource_type` (String) This rule applies to access only for type of resource. must be one of ["topic", "group", "transactional_id"]
91+
92+
<a id="nestedatt--config--rules--operations"></a>
93+
### Nested Schema for `config.rules.operations`
94+
95+
Required:
96+
97+
- `name` (String) must be one of ["alter", "alter_configs", "create", "delete", "describe", "describe_configs", "idempotent_write", "read", "write"]
98+
99+
100+
<a id="nestedatt--config--rules--resource_names"></a>
101+
### Nested Schema for `config.rules.resource_names`
102+
103+
Required:
104+
105+
- `match` (String) Currently supported are exact matches and globs.
106+
All `*` characters are interpreted as globs, i.e. they match zero or more of any character.
107+
108+
## Import
109+
110+
Import is supported using the following syntax:
111+
112+
```shell
113+
terraform import konnect_event_gateway_cluster_policy_acls.my_konnect_event_gateway_cluster_policy_acls '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": ""}'
114+
```
Lines changed: 130 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,130 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "konnect_event_gateway_consume_policy_decrypt Resource - terraform-provider-konnect-beta"
4+
subcategory: ""
5+
description: |-
6+
EventGatewayConsumePolicyDecrypt Resource
7+
---
8+
9+
# konnect_event_gateway_consume_policy_decrypt (Resource)
10+
11+
EventGatewayConsumePolicyDecrypt Resource
12+
13+
## Example Usage
14+
15+
```terraform
16+
resource "konnect_event_gateway_consume_policy_decrypt" "my_eventgatewayconsumepolicydecrypt" {
17+
provider = konnect-beta
18+
condition = "context.topic.name.endsWith('my_suffix')"
19+
config = {
20+
decrypt = [
21+
{
22+
part_of_record = "key"
23+
}
24+
]
25+
failure_mode = "passthrough"
26+
key_sources = [
27+
{
28+
aws = {
29+
# ...
30+
}
31+
}
32+
]
33+
}
34+
description = "...my_description..."
35+
enabled = false
36+
gateway_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"
37+
labels = {
38+
key = "value"
39+
}
40+
name = "...my_name..."
41+
parent_policy_id = "969447b3-1e41-42d8-a020-1ebc4e88a916"
42+
virtual_cluster_id = "05c6c607-3c42-45e9-a9e8-3e6338120724"
43+
}
44+
```
45+
46+
<!-- schema generated by tfplugindocs -->
47+
## Schema
48+
49+
### Required
50+
51+
- `gateway_id` (String) The UUID of your Gateway.
52+
- `virtual_cluster_id` (String) The ID of the Virtual Cluster.
53+
54+
### Optional
55+
56+
- `condition` (String) A string containing the boolean expression that determines whether the policy is applied.
57+
- `config` (Attributes) The configuration of the decrypt policy. (see [below for nested schema](#nestedatt--config))
58+
- `description` (String) A human-readable description of the policy.
59+
- `enabled` (Boolean) Whether the policy is enabled. Default: true
60+
- `labels` (Map of String) Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
61+
62+
Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
63+
- `name` (String) A unique user-defined name of the policy.
64+
- `parent_policy_id` (String) When specified, it sets the ID of the parent policy. Requires replacement if changed.
65+
66+
### Read-Only
67+
68+
- `created_at` (String) An ISO-8601 timestamp representation of entity creation date.
69+
- `id` (String) The unique identifier of the policy.
70+
- `updated_at` (String) An ISO-8601 timestamp representation of entity update date.
71+
72+
<a id="nestedatt--config"></a>
73+
### Nested Schema for `config`
74+
75+
Required:
76+
77+
- `decrypt` (Attributes List) Describes what parts of a record to decrypt. (see [below for nested schema](#nestedatt--config--decrypt))
78+
- `failure_mode` (String) Describes how to handle failing encryption or decryption.
79+
Use `error` if the record should be rejected if encryption or decryption fails.
80+
Use `passthrough` to ignore encryption or decryption failure and continue proxying the record.
81+
must be one of ["error", "passthrough"]
82+
- `key_sources` (Attributes List) Describes how to find a symmetric key for decryption. (see [below for nested schema](#nestedatt--config--key_sources))
83+
84+
<a id="nestedatt--config--decrypt"></a>
85+
### Nested Schema for `config.decrypt`
86+
87+
Required:
88+
89+
- `part_of_record` (String) * key - decrypt the record key
90+
* value - decrypt the record value
91+
must be one of ["key", "value"]
92+
93+
94+
<a id="nestedatt--config--key_sources"></a>
95+
### Nested Schema for `config.key_sources`
96+
97+
Optional:
98+
99+
- `aws` (Attributes) A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
100+
101+
See [aws docs](https://docs.aws.amazon.com/sdk-for-rust/latest/dg/credproviders.html#credproviders-default-credentials-provider-chain)
102+
for more information about how credential retrieval. (see [below for nested schema](#nestedatt--config--key_sources--aws))
103+
- `static` (Attributes) A key source that uses a static symmetric key. The key is provided as a base64-encoded string. (see [below for nested schema](#nestedatt--config--key_sources--static))
104+
105+
<a id="nestedatt--config--key_sources--aws"></a>
106+
### Nested Schema for `config.key_sources.aws`
107+
108+
109+
<a id="nestedatt--config--key_sources--static"></a>
110+
### Nested Schema for `config.key_sources.static`
111+
112+
Required:
113+
114+
- `keys` (Attributes List) A list of static, user-provided keys. Each one must be 128 bits long. (see [below for nested schema](#nestedatt--config--key_sources--static--keys))
115+
116+
<a id="nestedatt--config--key_sources--static--keys"></a>
117+
### Nested Schema for `config.key_sources.static.keys`
118+
119+
Required:
120+
121+
- `id` (String) The unique identifier of the key.
122+
- `key` (String) A template string expression containing a reference to a secret
123+
124+
## Import
125+
126+
Import is supported using the following syntax:
127+
128+
```shell
129+
terraform import konnect_event_gateway_consume_policy_decrypt.my_konnect_event_gateway_consume_policy_decrypt '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": ""}'
130+
```
Lines changed: 106 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,106 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "konnect_event_gateway_consume_policy_modify_headers Resource - terraform-provider-konnect-beta"
4+
subcategory: ""
5+
description: |-
6+
EventGatewayConsumePolicyModifyHeaders Resource
7+
---
8+
9+
# konnect_event_gateway_consume_policy_modify_headers (Resource)
10+
11+
EventGatewayConsumePolicyModifyHeaders Resource
12+
13+
## Example Usage
14+
15+
```terraform
16+
resource "konnect_event_gateway_consume_policy_modify_headers" "my_eventgatewayconsumepolicymodifyheaders" {
17+
provider = konnect-beta
18+
condition = "context.topic.name.endsWith('my_suffix')"
19+
config = {
20+
actions = [
21+
{
22+
remove = {
23+
key = "...my_key..."
24+
}
25+
}
26+
]
27+
}
28+
description = "...my_description..."
29+
enabled = true
30+
gateway_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"
31+
labels = {
32+
key = "value"
33+
}
34+
name = "...my_name..."
35+
parent_policy_id = "45b2f9d6-c646-4faa-8c5f-7d1ebf8687c1"
36+
virtual_cluster_id = "58221d12-f9c8-4032-9ae2-54155e337f04"
37+
}
38+
```
39+
40+
<!-- schema generated by tfplugindocs -->
41+
## Schema
42+
43+
### Required
44+
45+
- `config` (Attributes) The configuration of the modify headers policy. (see [below for nested schema](#nestedatt--config))
46+
- `gateway_id` (String) The UUID of your Gateway.
47+
- `virtual_cluster_id` (String) The ID of the Virtual Cluster.
48+
49+
### Optional
50+
51+
- `condition` (String) A string containing the boolean expression that determines whether the policy is applied.
52+
53+
When the policy is applied as a child policy of schema_validation, the expression can also reference
54+
`record.value` fields.
55+
- `description` (String) A human-readable description of the policy.
56+
- `enabled` (Boolean) Whether the policy is enabled. Default: true
57+
- `labels` (Map of String) Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
58+
59+
Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
60+
- `name` (String) A unique user-defined name of the policy.
61+
- `parent_policy_id` (String) When specified, it sets the ID of the parent policy. Requires replacement if changed.
62+
63+
### Read-Only
64+
65+
- `created_at` (String) An ISO-8601 timestamp representation of entity creation date.
66+
- `id` (String) The unique identifier of the policy.
67+
- `updated_at` (String) An ISO-8601 timestamp representation of entity update date.
68+
69+
<a id="nestedatt--config"></a>
70+
### Nested Schema for `config`
71+
72+
Optional:
73+
74+
- `actions` (Attributes List) Actions are run in sequential order and act on individual headers. (see [below for nested schema](#nestedatt--config--actions))
75+
76+
<a id="nestedatt--config--actions"></a>
77+
### Nested Schema for `config.actions`
78+
79+
Optional:
80+
81+
- `remove` (Attributes) An action that removes a header by key. (see [below for nested schema](#nestedatt--config--actions--remove))
82+
- `set` (Attributes) An action that sets a header key and value. (see [below for nested schema](#nestedatt--config--actions--set))
83+
84+
<a id="nestedatt--config--actions--remove"></a>
85+
### Nested Schema for `config.actions.remove`
86+
87+
Required:
88+
89+
- `key` (String) The key of the header to remove.
90+
91+
92+
<a id="nestedatt--config--actions--set"></a>
93+
### Nested Schema for `config.actions.set`
94+
95+
Required:
96+
97+
- `key` (String) The key of the header to set.
98+
- `value` (String) The value of the header to set.
99+
100+
## Import
101+
102+
Import is supported using the following syntax:
103+
104+
```shell
105+
terraform import konnect_event_gateway_consume_policy_modify_headers.my_konnect_event_gateway_consume_policy_modify_headers '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": ""}'
106+
```

0 commit comments

Comments
 (0)