Support setting group default_branch_protection to 0.

Author: timofurrer

internal/provider/resource_gitlab_group.go

@@ -208,7 +208,9 @@ func resourceGitlabGroupCreate(ctx context.Context, d *schema.ResourceData, meta
 		options.ParentID = gitlab.Int(v.(int))
 	}
 
-	if v, ok := d.GetOk("default_branch_protection"); ok {
+	// nolint:staticcheck // SA1019 ignore deprecated GetOkExists
+	// lintignore: XR001 // TODO: replace with alternative for GetOkExists
+	if v, ok := d.GetOkExists("default_branch_protection"); ok {
 		options.DefaultBranchProtection = gitlab.Int(v.(int))
 	}
 

internal/provider/resource_gitlab_group_test.go

@@ -41,7 +41,7 @@ func TestAccGitlabGroup_basic(t *testing.T) {
 			},
 			// Update the group to change the description
 			{
-				Config: testAccGitlabGroupUpdateConfig(rInt),
+				Config: testAccGitlabGroupUpdateConfig(rInt, 1),
 				Check: resource.ComposeTestCheckFunc(
 					testAccCheckGitlabGroupExists("gitlab_group.foo", &group),
 					testAccCheckGitlabGroupAttributes(&group, &testAccGitlabGroupExpectedAttributes{
@@ -63,6 +63,30 @@ func TestAccGitlabGroup_basic(t *testing.T) {
 					}),
 				),
 			},
+			// Update the group to use zero-value `default_branch_protection`
+			{
+				Config: testAccGitlabGroupUpdateConfig(rInt, 0),
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckGitlabGroupExists("gitlab_group.foo", &group),
+					testAccCheckGitlabGroupAttributes(&group, &testAccGitlabGroupExpectedAttributes{
+						Name:                    fmt.Sprintf("bar-name-%d", rInt),
+						Path:                    fmt.Sprintf("bar-path-%d", rInt),
+						Description:             "Terraform acceptance tests! Updated description",
+						LFSEnabled:              false,
+						Visibility:              "public", // default value
+						RequestAccessEnabled:    true,
+						ProjectCreationLevel:    "developer",
+						SubGroupCreationLevel:   "maintainer",
+						RequireTwoFactorAuth:    true,
+						TwoFactorGracePeriod:    56,
+						AutoDevopsEnabled:       true,
+						EmailsDisabled:          true,
+						MentionsDisabled:        true,
+						ShareWithGroupLock:      true,
+						DefaultBranchProtection: 0,
+					}),
+				),
+			},
 			// Update the group to put the name and description back
 			{
 				Config: testAccGitlabGroupConfig(rInt),
@@ -398,7 +422,7 @@ resource "gitlab_group" "foo" {
   `, rInt, rInt)
 }
 
-func testAccGitlabGroupUpdateConfig(rInt int) string {
+func testAccGitlabGroupUpdateConfig(rInt int, defaultBranchProtection int) string {
 	return fmt.Sprintf(`
 resource "gitlab_group" "foo" {
   name = "bar-name-%d"
@@ -414,13 +438,13 @@ resource "gitlab_group" "foo" {
   emails_disabled = true
   mentions_disabled = true
   share_with_group_lock = true
-  default_branch_protection = 1
+  default_branch_protection = %d
 
   # So that acceptance tests can be run in a gitlab organization
   # with no billing
   visibility_level = "public"
 }
-  `, rInt, rInt)
+  `, rInt, rInt, defaultBranchProtection)
 }
 
 func testAccGitlabNestedGroupConfig(rInt int) string {