gitlabhq
diff --git a/‎CHANGELOG.md‎
Lines changed: 1 addition & 0 deletions b/‎CHANGELOG.md‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎gitlab/provider.go‎
Lines changed: 1 addition & 0 deletions b/‎gitlab/provider.go‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎gitlab/resource_gitlab_instance_cluster.go‎
Lines changed: 254 additions & 0 deletions b/‎gitlab/resource_gitlab_instance_cluster.go‎
Lines changed: 254 additions & 0 deletions
@@ -97,6 +97,7 @@ ENHANCEMENTS:
 ## 2.5.1 (April 06, 2020)
 
 BUGFIXES:
+
 * Support for soft-delete of groups and projects in Gitlab Enterprise Edition 
   ([#282](https://github.com/gitlabhq/terraform-provider-gitlab/issues/282),
    [#283](https://github.com/gitlabhq/terraform-provider-gitlab/issues/283),
 
@@ -90,6 +90,7 @@ func Provider() terraform.ResourceProvider {
 			"gitlab_project_share_group":        resourceGitlabProjectShareGroup(),
 			"gitlab_group_cluster":              resourceGitlabGroupCluster(),
 			"gitlab_group_ldap_link":            resourceGitlabGroupLdapLink(),
+			"gitlab_instance_cluster":           resourceGitlabInstanceCluster(),
 			"gitlab_project_mirror":             resourceGitlabProjectMirror(),
 			"gitlab_project_level_mr_approvals": resourceGitlabProjectLevelMRApprovals(),
 		},
 
@@ -0,0 +1,254 @@
+package gitlab
+
+import (
+	"fmt"
+	"log"
+	"strconv"
+
+	"github.com/hashicorp/terraform-plugin-sdk/helper/schema"
+	"github.com/hashicorp/terraform-plugin-sdk/helper/validation"
+	"github.com/xanzy/go-gitlab"
+)
+
+func resourceGitlabInstanceCluster() *schema.Resource {
+	return &schema.Resource{
+		Create: resourceGitlabInstanceClusterCreate,
+		Read:   resourceGitlabInstanceClusterRead,
+		Update: resourceGitlabInstanceClusterUpdate,
+		Delete: resourceGitlabInstanceClusterDelete,
+		Importer: &schema.ResourceImporter{
+			State: schema.ImportStatePassthrough,
+		},
+
+		Schema: map[string]*schema.Schema{
+			"name": {
+				Type:     schema.TypeString,
+				Required: true,
+			},
+			"domain": {
+				Type:     schema.TypeString,
+				Optional: true,
+			},
+			"enabled": {
+				Type:     schema.TypeBool,
+				Optional: true,
+				Default:  true,
+				ForceNew: true,
+			},
+			"managed": {
+				Type:     schema.TypeBool,
+				Optional: true,
+				Default:  true,
+				ForceNew: true,
+			},
+			"created_at": {
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"provider_type": {
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"platform_type": {
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"environment_scope": {
+				Type:     schema.TypeString,
+				Optional: true,
+				Default:  "*",
+			},
+			"cluster_type": {
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"kubernetes_api_url": {
+				Type:     schema.TypeString,
+				Required: true,
+			},
+			"kubernetes_token": {
+				Type:      schema.TypeString,
+				Required:  true,
+				Sensitive: true,
+			},
+			"kubernetes_ca_cert": {
+				Type:     schema.TypeString,
+				Optional: true,
+			},
+			"kubernetes_namespace": {
+				Type:     schema.TypeString,
+				Optional: true,
+			},
+			"kubernetes_authorization_type": {
+				Type:         schema.TypeString,
+				Optional:     true,
+				ForceNew:     true,
+				Default:      "rbac",
+				ValidateFunc: validation.StringInSlice([]string{"rbac", "abac", "unknown_authorization"}, false),
+			},
+			"management_project_id": {
+				Type:     schema.TypeString,
+				Optional: true,
+			},
+		},
+	}
+}
+
+func resourceGitlabInstanceClusterCreate(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*gitlab.Client)
+
+	pk := gitlab.AddPlatformKubernetesOptions{
+		APIURL: gitlab.String(d.Get("kubernetes_api_url").(string)),
+		Token:  gitlab.String(d.Get("kubernetes_token").(string)),
+	}
+
+	if v, ok := d.GetOk("kubernetes_ca_cert"); ok {
+		pk.CaCert = gitlab.String(v.(string))
+	}
+
+	if v, ok := d.GetOk("kubernetes_authorization_type"); ok {
+		pk.AuthorizationType = gitlab.String(v.(string))
+	}
+
+	options := &gitlab.AddClusterOptions{
+		Name:               gitlab.String(d.Get("name").(string)),
+		Enabled:            gitlab.Bool(d.Get("enabled").(bool)),
+		Managed:            gitlab.Bool(d.Get("managed").(bool)),
+		PlatformKubernetes: &pk,
+	}
+
+	if v, ok := d.GetOk("domain"); ok {
+		options.Domain = gitlab.String(v.(string))
+	}
+
+	if v, ok := d.GetOk("environment_scope"); ok {
+		options.EnvironmentScope = gitlab.String(v.(string))
+	}
+
+	if v, ok := d.GetOk("management_project_id"); ok {
+		options.ManagementProjectID = gitlab.String(v.(string))
+	}
+
+	log.Printf("[DEBUG] create gitlab instance cluster %q", *options.Name)
+
+	cluster, _, err := client.InstanceCluster.AddCluster(options)
+
+	if err != nil {
+		return err
+	}
+
+	clusterIdString := fmt.Sprintf("%d", cluster.ID)
+	d.SetId(clusterIdString)
+
+	return resourceGitlabInstanceClusterRead(d, meta)
+}
+
+func resourceGitlabInstanceClusterRead(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*gitlab.Client)
+
+	clusterId, err := strconv.Atoi(d.Id())
+	if err != nil {
+		return err
+	}
+
+	log.Printf("[DEBUG] read gitlab instance cluster %d", clusterId)
+
+	cluster, _, err := client.InstanceCluster.GetCluster(clusterId)
+	if err != nil {
+		return err
+	}
+
+	d.Set("name", cluster.Name)
+	d.Set("domain", cluster.Domain)
+	d.Set("created_at", cluster.CreatedAt.String())
+	d.Set("provider_type", cluster.ProviderType)
+	d.Set("platform_type", cluster.PlatformType)
+	d.Set("environment_scope", cluster.EnvironmentScope)
+	d.Set("cluster_type", cluster.ClusterType)
+
+	d.Set("kubernetes_api_url", cluster.PlatformKubernetes.APIURL)
+	d.Set("kubernetes_ca_cert", cluster.PlatformKubernetes.CaCert)
+	d.Set("kubernetes_namespace", cluster.PlatformKubernetes.Namespace)
+	d.Set("kubernetes_authorization_type", cluster.PlatformKubernetes.AuthorizationType)
+
+	if cluster.ManagementProject == nil {
+		d.Set("management_project_id", "")
+	} else {
+		d.Set("management_project_id", strconv.Itoa(cluster.ManagementProject.ID))
+	}
+
+	return nil
+}
+
+func resourceGitlabInstanceClusterUpdate(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*gitlab.Client)
+
+	clusterId, err := strconv.Atoi(d.Id())
+	if err != nil {
+		return err
+	}
+
+	options := &gitlab.EditClusterOptions{}
+
+	if d.HasChange("name") {
+		options.Name = gitlab.String(d.Get("name").(string))
+	}
+
+	if d.HasChange("domain") {
+		options.Domain = gitlab.String(d.Get("domain").(string))
+	}
+
+	if d.HasChange("environment_scope") {
+		options.EnvironmentScope = gitlab.String(d.Get("environment_scope").(string))
+	}
+
+	pk := &gitlab.EditPlatformKubernetesOptions{}
+
+	if d.HasChange("kubernetes_api_url") {
+		pk.APIURL = gitlab.String(d.Get("kubernetes_api_url").(string))
+	}
+
+	if d.HasChange("kubernetes_token") {
+		pk.Token = gitlab.String(d.Get("kubernetes_token").(string))
+	}
+
+	if d.HasChange("kubernetes_ca_cert") {
+		pk.CaCert = gitlab.String(d.Get("kubernetes_ca_cert").(string))
+	}
+
+	if d.HasChange("namespace") {
+		pk.Namespace = gitlab.String(d.Get("namespace").(string))
+	}
+
+	if *pk != (gitlab.EditPlatformKubernetesOptions{}) {
+		options.PlatformKubernetes = pk
+	}
+
+	if d.HasChange("management_project_id") {
+		options.ManagementProjectID = gitlab.String(d.Get("management_project_id").(string))
+	}
+
+	if *options != (gitlab.EditClusterOptions{}) {
+		log.Printf("[DEBUG] update gitlab instance cluster %d", clusterId)
+		_, _, err := client.InstanceCluster.EditCluster(clusterId, options)
+		if err != nil {
+			return err
+		}
+	}
+
+	return resourceGitlabInstanceClusterRead(d, meta)
+}
+
+func resourceGitlabInstanceClusterDelete(d *schema.ResourceData, meta interface{}) error {
+	client := meta.(*gitlab.Client)
+	clusterId, err := strconv.Atoi(d.Id())
+	if err != nil {
+		return err
+	}
+
+	log.Printf("[DEBUG] delete gitlab instance cluster %d", clusterId)
+
+	_, err = client.InstanceCluster.DeleteCluster(clusterId)
+
+	return err
+}