package digitalocean import ( "fmt" "log" "strconv" "strings" "time" "github.com/digitalocean/godo" "github.com/hashicorp/terraform/helper/resource" "github.com/hashicorp/terraform/helper/schema" ) func resourceDigitalOceanDroplet() *schema.Resource { return &schema.Resource{ Create: resourceDigitalOceanDropletCreate, Read: resourceDigitalOceanDropletRead, Update: resourceDigitalOceanDropletUpdate, Delete: resourceDigitalOceanDropletDelete, Importer: &schema.ResourceImporter{ State: schema.ImportStatePassthrough, }, Schema: map[string]*schema.Schema{ "image": &schema.Schema{ Type: schema.TypeString, Required: true, ForceNew: true, }, "name": &schema.Schema{ Type: schema.TypeString, Required: true, }, "region": &schema.Schema{ Type: schema.TypeString, Required: true, ForceNew: true, StateFunc: func(val interface{}) string { // DO API V2 region slug is always lowercase return strings.ToLower(val.(string)) }, }, "size": &schema.Schema{ Type: schema.TypeString, Required: true, StateFunc: func(val interface{}) string { // DO API V2 size slug is always lowercase return strings.ToLower(val.(string)) }, }, "status": &schema.Schema{ Type: schema.TypeString, Computed: true, }, "locked": &schema.Schema{ Type: schema.TypeString, Computed: true, }, "backups": &schema.Schema{ Type: schema.TypeBool, Optional: true, }, "ipv6": &schema.Schema{ Type: schema.TypeBool, Optional: true, }, "ipv6_address": &schema.Schema{ Type: schema.TypeString, Computed: true, }, "ipv6_address_private": &schema.Schema{ Type: schema.TypeString, Computed: true, }, "private_networking": &schema.Schema{ Type: schema.TypeBool, Optional: true, }, "ipv4_address": &schema.Schema{ Type: schema.TypeString, Computed: true, }, "ipv4_address_private": &schema.Schema{ Type: schema.TypeString, Computed: true, }, "ssh_keys": &schema.Schema{ Type: schema.TypeList, Optional: true, Elem: &schema.Schema{Type: schema.TypeString}, }, "tags": &schema.Schema{ Type: schema.TypeList, Optional: true, Elem: &schema.Schema{Type: schema.TypeString}, }, "user_data": &schema.Schema{ Type: schema.TypeString, Optional: true, ForceNew: true, }, }, } } func resourceDigitalOceanDropletCreate(d *schema.ResourceData, meta interface{}) error { client := meta.(*godo.Client) // Build up our creation options opts := &godo.DropletCreateRequest{ Image: godo.DropletCreateImage{ Slug: d.Get("image").(string), }, Name: d.Get("name").(string), Region: d.Get("region").(string), Size: d.Get("size").(string), } if attr, ok := d.GetOk("backups"); ok { opts.Backups = attr.(bool) } if attr, ok := d.GetOk("ipv6"); ok { opts.IPv6 = attr.(bool) } if attr, ok := d.GetOk("private_networking"); ok { opts.PrivateNetworking = attr.(bool) } if attr, ok := d.GetOk("user_data"); ok { opts.UserData = attr.(string) } // Get configured ssh_keys sshKeys := d.Get("ssh_keys.#").(int) if sshKeys > 0 { opts.SSHKeys = make([]godo.DropletCreateSSHKey, 0, sshKeys) for i := 0; i < sshKeys; i++ { key := fmt.Sprintf("ssh_keys.%d", i) sshKeyRef := d.Get(key).(string) var sshKey godo.DropletCreateSSHKey // sshKeyRef can be either an ID or a fingerprint if id, err := strconv.Atoi(sshKeyRef); err == nil { sshKey.ID = id } else { sshKey.Fingerprint = sshKeyRef } opts.SSHKeys = append(opts.SSHKeys, sshKey) } } log.Printf("[DEBUG] Droplet create configuration: %#v", opts) droplet, _, err := client.Droplets.Create(opts) if err != nil { return fmt.Errorf("Error creating droplet: %s", err) } // Assign the droplets id d.SetId(strconv.Itoa(droplet.ID)) log.Printf("[INFO] Droplet ID: %s", d.Id()) _, err = WaitForDropletAttribute(d, "active", []string{"new"}, "status", meta) if err != nil { return fmt.Errorf( "Error waiting for droplet (%s) to become ready: %s", d.Id(), err) } // droplet needs to be active in order to set tags err = setTags(client, d) if err != nil { return fmt.Errorf("Error setting tags: %s", err) } return resourceDigitalOceanDropletRead(d, meta) } func resourceDigitalOceanDropletRead(d *schema.ResourceData, meta interface{}) error { client := meta.(*godo.Client) id, err := strconv.Atoi(d.Id()) if err != nil { return fmt.Errorf("invalid droplet id: %v", err) } // Retrieve the droplet properties for updating the state droplet, resp, err := client.Droplets.Get(id) if err != nil { // check if the droplet no longer exists. if resp != nil && resp.StatusCode == 404 { log.Printf("[WARN] DigitalOcean Droplet (%s) not found", d.Id()) d.SetId("") return nil } return fmt.Errorf("Error retrieving droplet: %s", err) } if droplet.Image.Slug != "" { d.Set("image", droplet.Image.Slug) } else { d.Set("image", droplet.Image.ID) } d.Set("name", droplet.Name) d.Set("region", droplet.Region.Slug) d.Set("size", droplet.Size.Slug) d.Set("status", droplet.Status) d.Set("locked", strconv.FormatBool(droplet.Locked)) if publicIPv6 := findIPv6AddrByType(droplet, "public"); publicIPv6 != "" { d.Set("ipv6", true) d.Set("ipv6_address", publicIPv6) d.Set("ipv6_address_private", findIPv6AddrByType(droplet, "private")) } d.Set("ipv4_address", findIPv4AddrByType(droplet, "public")) if privateIPv4 := findIPv4AddrByType(droplet, "private"); privateIPv4 != "" { d.Set("private_networking", true) d.Set("ipv4_address_private", privateIPv4) } // Initialize the connection info d.SetConnInfo(map[string]string{ "type": "ssh", "host": findIPv4AddrByType(droplet, "public"), }) d.Set("tags", droplet.Tags) return nil } func findIPv6AddrByType(d *godo.Droplet, addrType string) string { for _, addr := range d.Networks.V6 { if addr.Type == addrType { return addr.IPAddress } } return "" } func findIPv4AddrByType(d *godo.Droplet, addrType string) string { for _, addr := range d.Networks.V4 { if addr.Type == addrType { return addr.IPAddress } } return "" } func resourceDigitalOceanDropletUpdate(d *schema.ResourceData, meta interface{}) error { client := meta.(*godo.Client) id, err := strconv.Atoi(d.Id()) if err != nil { return fmt.Errorf("invalid droplet id: %v", err) } if d.HasChange("size") { oldSize, newSize := d.GetChange("size") _, _, err = client.DropletActions.PowerOff(id) if err != nil && !strings.Contains(err.Error(), "Droplet is already powered off") { return fmt.Errorf( "Error powering off droplet (%s): %s", d.Id(), err) } // Wait for power off _, err = WaitForDropletAttribute(d, "off", []string{"active"}, "status", client) if err != nil { return fmt.Errorf( "Error waiting for droplet (%s) to become powered off: %s", d.Id(), err) } // Resize the droplet _, _, err = client.DropletActions.Resize(id, newSize.(string), true) if err != nil { newErr := powerOnAndWait(d, meta) if newErr != nil { return fmt.Errorf( "Error powering on droplet (%s) after failed resize: %s", d.Id(), err) } return fmt.Errorf( "Error resizing droplet (%s): %s", d.Id(), err) } // Wait for the size to change _, err = WaitForDropletAttribute( d, newSize.(string), []string{"", oldSize.(string)}, "size", meta) if err != nil { newErr := powerOnAndWait(d, meta) if newErr != nil { return fmt.Errorf( "Error powering on droplet (%s) after waiting for resize to finish: %s", d.Id(), err) } return fmt.Errorf( "Error waiting for resize droplet (%s) to finish: %s", d.Id(), err) } _, _, err = client.DropletActions.PowerOn(id) if err != nil { return fmt.Errorf( "Error powering on droplet (%s) after resize: %s", d.Id(), err) } // Wait for power off _, err = WaitForDropletAttribute(d, "active", []string{"off"}, "status", meta) if err != nil { return err } } if d.HasChange("name") { oldName, newName := d.GetChange("name") // Rename the droplet _, _, err = client.DropletActions.Rename(id, newName.(string)) if err != nil { return fmt.Errorf( "Error renaming droplet (%s): %s", d.Id(), err) } // Wait for the name to change _, err = WaitForDropletAttribute( d, newName.(string), []string{"", oldName.(string)}, "name", meta) if err != nil { return fmt.Errorf( "Error waiting for rename droplet (%s) to finish: %s", d.Id(), err) } } // As there is no way to disable private networking, // we only check if it needs to be enabled if d.HasChange("private_networking") && d.Get("private_networking").(bool) { _, _, err = client.DropletActions.EnablePrivateNetworking(id) if err != nil { return fmt.Errorf( "Error enabling private networking for droplet (%s): %s", d.Id(), err) } // Wait for the private_networking to turn on _, err = WaitForDropletAttribute( d, "true", []string{"", "false"}, "private_networking", meta) return fmt.Errorf( "Error waiting for private networking to be enabled on for droplet (%s): %s", d.Id(), err) } // As there is no way to disable IPv6, we only check if it needs to be enabled if d.HasChange("ipv6") && d.Get("ipv6").(bool) { _, _, err = client.DropletActions.EnableIPv6(id) if err != nil { return fmt.Errorf( "Error turning on ipv6 for droplet (%s): %s", d.Id(), err) } // Wait for ipv6 to turn on _, err = WaitForDropletAttribute( d, "true", []string{"", "false"}, "ipv6", meta) if err != nil { return fmt.Errorf( "Error waiting for ipv6 to be turned on for droplet (%s): %s", d.Id(), err) } } if d.HasChange("tags") { err = setTags(client, d) if err != nil { return fmt.Errorf("Error updating tags: %s", err) } } return resourceDigitalOceanDropletRead(d, meta) } func resourceDigitalOceanDropletDelete(d *schema.ResourceData, meta interface{}) error { client := meta.(*godo.Client) id, err := strconv.Atoi(d.Id()) if err != nil { return fmt.Errorf("invalid droplet id: %v", err) } _, err = WaitForDropletAttribute( d, "false", []string{"", "true"}, "locked", meta) if err != nil { return fmt.Errorf( "Error waiting for droplet to be unlocked for destroy (%s): %s", d.Id(), err) } log.Printf("[INFO] Deleting droplet: %s", d.Id()) // Destroy the droplet _, err = client.Droplets.Delete(id) // Handle remotely destroyed droplets if err != nil && strings.Contains(err.Error(), "404 Not Found") { return nil } if err != nil { return fmt.Errorf("Error deleting droplet: %s", err) } return nil } func WaitForDropletAttribute( d *schema.ResourceData, target string, pending []string, attribute string, meta interface{}) (interface{}, error) { // Wait for the droplet so we can get the networking attributes // that show up after a while log.Printf( "[INFO] Waiting for droplet (%s) to have %s of %s", d.Id(), attribute, target) stateConf := &resource.StateChangeConf{ Pending: pending, Target: []string{target}, Refresh: newDropletStateRefreshFunc(d, attribute, meta), Timeout: 60 * time.Minute, Delay: 10 * time.Second, MinTimeout: 3 * time.Second, // This is a hack around DO API strangeness. // https://github.com/hashicorp/terraform/issues/481 // NotFoundChecks: 60, } return stateConf.WaitForState() } // TODO This function still needs a little more refactoring to make it // cleaner and more efficient func newDropletStateRefreshFunc( d *schema.ResourceData, attribute string, meta interface{}) resource.StateRefreshFunc { client := meta.(*godo.Client) return func() (interface{}, string, error) { id, err := strconv.Atoi(d.Id()) if err != nil { return nil, "", err } err = resourceDigitalOceanDropletRead(d, meta) if err != nil { return nil, "", err } // If the droplet is locked, continue waiting. We can // only perform actions on unlocked droplets, so it's // pointless to look at that status if d.Get("locked").(string) == "true" { log.Println("[DEBUG] Droplet is locked, skipping status check and retrying") return nil, "", nil } // See if we can access our attribute if attr, ok := d.GetOk(attribute); ok { // Retrieve the droplet properties droplet, _, err := client.Droplets.Get(id) if err != nil { return nil, "", fmt.Errorf("Error retrieving droplet: %s", err) } return &droplet, attr.(string), nil } return nil, "", nil } } // Powers on the droplet and waits for it to be active func powerOnAndWait(d *schema.ResourceData, meta interface{}) error { id, err := strconv.Atoi(d.Id()) if err != nil { return fmt.Errorf("invalid droplet id: %v", err) } client := meta.(*godo.Client) _, _, err = client.DropletActions.PowerOn(id) if err != nil { return err } // Wait for power on _, err = WaitForDropletAttribute(d, "active", []string{"off"}, "status", client) if err != nil { return err } return nil }