add validation

Author: Mia-Cross

internal/services/instance/server.go

@@ -375,9 +375,10 @@ func ResourceServer() *schema.Resource {
 				},
 			},
 			"admin_password_encryption_ssh_key_id": {
-				Type:        schema.TypeString,
-				Optional:    true,
-				Description: "The ID of the IAM SSH key used to encrypt the initial admin password on a Windows server",
+				Type:             schema.TypeString,
+				Optional:         true,
+				ValidateDiagFunc: verify.IsUUIDOrEmpty(),
+				Description:      "The ID of the IAM SSH key used to encrypt the initial admin password on a Windows server",
 			},
 			"zone":            zonal.Schema(),
 			"organization_id": account.OrganizationIDSchema(),

internal/verify/uuid.go

@@ -42,6 +42,34 @@ func IsUUID() schema.SchemaValidateDiagFunc {
 	}
 }
 
+func IsUUIDOrEmpty() schema.SchemaValidateDiagFunc {
+	return func(value any, path cty.Path) diag.Diagnostics {
+		uuid, isString := value.(string)
+		if !isString {
+			return diag.Diagnostics{diag.Diagnostic{
+				Severity:      diag.Error,
+				Summary:       "invalid UUID not a string",
+				AttributePath: path,
+			}}
+		}
+
+		if uuid == "" {
+			return nil
+		}
+
+		if !validation.IsUUID(uuid) {
+			return diag.Diagnostics{diag.Diagnostic{
+				Severity:      diag.Error,
+				Summary:       "invalid UUID: " + uuid,
+				AttributePath: path,
+				Detail:        "format should be 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' (36) and contains valid hexadecimal characters",
+			}}
+		}
+
+		return nil
+	}
+}
+
 func IsUUIDWithLocality() schema.SchemaValidateDiagFunc {
 	return func(value any, path cty.Path) diag.Diagnostics {
 		uuid, isString := value.(string)