feat(baremetal): support protected server (#3251)

* feat(baremetal): support protected feature

fix(domain): handle root zone ID without leading dot (#3208)

fix test

fix lint

Co-authored-by: protobuf-ci-cd <[email protected]>

* fix(baremetal): typo and update doc

* fix(baremetal): typo and update doc

* test(baremetal): update cassettes

---------

Co-authored-by: protobuf-ci-cd <[email protected]>

Author: Laure-di

docs/resources/baremetal_server.md

@@ -305,6 +305,7 @@ The following arguments are supported:
     - `ipam_ip_ids` - (Optional) List of IPAM IP IDs to assign to the server in the requested private network.
 - `zone` - (Defaults to [provider](../index.md#zone) `zone`) The [zone](../guides/regions_and_zones.md#zones) in which the server should be created.
 - `partitioning` (Optional) The partitioning schema in JSON format
+- `protected` - (Optional) Set to true to activate server protection option.
 - `project_id` - (Defaults to [provider](../index.md#project_id) `project_id`) The ID of the project the server is associated with.
 
 

internal/services/baremetal/server.go

@@ -148,6 +148,12 @@ If this behaviour is wanted, please set 'reinstall_on_ssh_key_changes' argument
 				ValidateFunc: validation.StringLenBetween(0, 255),
 				Description:  "Some description to associate to the server, max 255 characters",
 			},
+			"protected": {
+				Type:        schema.TypeBool,
+				Optional:    true,
+				Default:     false,
+				Description: "If true, the baremetal server is protected against accidental deletion via the Scaleway API.",
+			},
 			"tags": {
 				Type: schema.TypeList,
 				Elem: &schema.Schema{
@@ -357,6 +363,7 @@ func ResourceServerCreate(ctx context.Context, d *schema.ResourceData, m any) di
 		Description: d.Get("description").(string),
 		OfferID:     offerID.ID,
 		Tags:        types.ExpandStrings(d.Get("tags")),
+		Protected:   d.Get("protected").(bool),
 	}
 
 	partitioningSchema := baremetal.Schema{}
@@ -505,6 +512,7 @@ func ResourceServerRead(ctx context.Context, d *schema.ResourceData, m any) diag
 	_ = d.Set("ips", flattenIPs(server.IPs))
 	_ = d.Set("ipv4", flattenIPv4s(server.IPs))
 	_ = d.Set("ipv6", flattenIPv6s(server.IPs))
+	_ = d.Set("protected", server.Protected)
 
 	if server.Install != nil {
 		_ = d.Set("os", zonal.NewIDString(server.Zone, os.ID))
@@ -701,6 +709,11 @@ func ResourceServerUpdate(ctx context.Context, d *schema.ResourceData, m any) di
 		hasChanged = true
 	}
 
+	if d.HasChange("protected") {
+		req.Protected = types.ExpandBoolPtr(d.Get("protected").(bool))
+		hasChanged = true
+	}
+
 	if hasChanged {
 		_, err = api.UpdateServer(req, scw.WithContext(ctx))
 		if err != nil {