130 lines
4.4 KiB
Go
130 lines
4.4 KiB
Go
package aws
|
|
|
|
import (
|
|
"bytes"
|
|
"fmt"
|
|
|
|
"github.com/cloudskiff/driftctl/pkg/helpers"
|
|
"github.com/cloudskiff/driftctl/pkg/resource"
|
|
"github.com/hashicorp/terraform/helper/hashcode"
|
|
)
|
|
|
|
const AwsSecurityGroupRuleResourceType = "aws_security_group_rule"
|
|
|
|
func CreateSecurityGroupRuleIdHash(attrs *resource.Attributes) string {
|
|
var buf bytes.Buffer
|
|
buf.WriteString(fmt.Sprintf("%s-", *attrs.GetString("security_group_id")))
|
|
if attrs.GetInt("from_port") != nil && *attrs.GetInt("from_port") > 0 {
|
|
buf.WriteString(fmt.Sprintf("%d-", *attrs.GetInt("from_port")))
|
|
}
|
|
if attrs.GetInt("to_port") != nil && *attrs.GetInt("to_port") > 0 {
|
|
buf.WriteString(fmt.Sprintf("%d-", *attrs.GetInt("to_port")))
|
|
}
|
|
buf.WriteString(fmt.Sprintf("%s-", *attrs.GetString("protocol")))
|
|
buf.WriteString(fmt.Sprintf("%s-", *attrs.GetString("type")))
|
|
|
|
if attrs.GetSlice("cidr_blocks") != nil {
|
|
for _, v := range attrs.GetSlice("cidr_blocks") {
|
|
buf.WriteString(fmt.Sprintf("%s-", v))
|
|
}
|
|
}
|
|
|
|
if attrs.GetSlice("ipv6_cidr_blocks") != nil {
|
|
for _, v := range attrs.GetSlice("ipv6_cidr_blocks") {
|
|
buf.WriteString(fmt.Sprintf("%s-", v))
|
|
}
|
|
}
|
|
|
|
if attrs.GetSlice("prefix_list_ids") != nil {
|
|
for _, v := range attrs.GetSlice("prefix_list_ids") {
|
|
buf.WriteString(fmt.Sprintf("%s-", v))
|
|
}
|
|
}
|
|
|
|
if (attrs.GetBool("self") != nil && *attrs.GetBool("self")) ||
|
|
(attrs.GetString("source_security_group_id") != nil && *attrs.GetString("source_security_group_id") != "") {
|
|
if attrs.GetBool("self") != nil && *attrs.GetBool("self") {
|
|
buf.WriteString(fmt.Sprintf("%s-", *attrs.GetString("security_group_id")))
|
|
} else {
|
|
buf.WriteString(fmt.Sprintf("%s-", *attrs.GetString("source_security_group_id")))
|
|
}
|
|
buf.WriteString("-")
|
|
}
|
|
|
|
return fmt.Sprintf("sgrule-%d", hashcode.String(buf.String()))
|
|
}
|
|
|
|
func initAwsSecurityGroupRuleMetaData(resourceSchemaRepository resource.SchemaRepositoryInterface) {
|
|
resourceSchemaRepository.SetNormalizeFunc(AwsSecurityGroupRuleResourceType, func(res *resource.AbstractResource) {
|
|
val := res.Attrs
|
|
val.DeleteIfDefault("security_group_id")
|
|
val.DeleteIfDefault("source_security_group_id")
|
|
|
|
// On first run, this field is set to null in state file and to "" after one refresh or apply
|
|
// This ensure that if we find a nil value we dont drift
|
|
val.DeleteIfDefault("description")
|
|
|
|
// If protocol is all (e.g. -1), tcp, udp, icmp or icmpv6 then we leave the resource untouched
|
|
// Else we delete the FromPort/ToPort and recreate the rule's id
|
|
switch *val.GetString("protocol") {
|
|
case "-1", "tcp", "udp", "icmp", "icmpv6":
|
|
return
|
|
}
|
|
|
|
val.SafeDelete([]string{"from_port"})
|
|
val.SafeDelete([]string{"to_port"})
|
|
id := CreateSecurityGroupRuleIdHash(val)
|
|
_ = val.SafeSet([]string{"id"}, id)
|
|
res.Id = id
|
|
})
|
|
resourceSchemaRepository.SetHumanReadableAttributesFunc(AwsSecurityGroupRuleResourceType, func(res *resource.AbstractResource) map[string]string {
|
|
val := res.Attrs
|
|
attrs := make(map[string]string)
|
|
if sgID := val.GetString("security_group_id"); sgID != nil && *sgID != "" {
|
|
attrs["SecurityGroup"] = *sgID
|
|
}
|
|
if protocol := val.GetString("protocol"); protocol != nil && *protocol != "" {
|
|
if *protocol == "-1" {
|
|
*protocol = "All"
|
|
}
|
|
attrs["Protocol"] = *protocol
|
|
}
|
|
fromPort := val.GetInt("from_port")
|
|
toPort := val.GetInt("to_port")
|
|
if fromPort != nil && toPort != nil {
|
|
portRange := "All"
|
|
if *fromPort != 0 && *fromPort == *toPort {
|
|
portRange = fmt.Sprintf("%d", *fromPort)
|
|
}
|
|
if *fromPort != 0 && *toPort != 0 && *fromPort != *toPort {
|
|
portRange = fmt.Sprintf("%d-%d", *fromPort, *toPort)
|
|
}
|
|
attrs["Ports"] = portRange
|
|
}
|
|
ty := val.GetString("type")
|
|
if ty != nil && *ty != "" {
|
|
attrs["Type"] = *ty
|
|
var sourceOrDestination string
|
|
switch *ty {
|
|
case "egress":
|
|
sourceOrDestination = "Destination"
|
|
case "ingress":
|
|
sourceOrDestination = "Source"
|
|
}
|
|
if ipv4 := val.GetSlice("cidr_blocks"); len(ipv4) > 0 {
|
|
attrs[sourceOrDestination] = helpers.Join(ipv4, ", ")
|
|
}
|
|
if ipv6 := val.GetSlice("ipv6_cidr_blocks"); len(ipv6) > 0 {
|
|
attrs[sourceOrDestination] = helpers.Join(ipv6, ", ")
|
|
}
|
|
if prefixList := val.GetSlice("prefix_list_ids"); len(prefixList) > 0 {
|
|
attrs[sourceOrDestination] = helpers.Join(prefixList, ", ")
|
|
}
|
|
if sourceSgID := val.GetString("source_security_group_id"); sourceSgID != nil && *sourceSgID != "" {
|
|
attrs[sourceOrDestination] = *sourceSgID
|
|
}
|
|
}
|
|
return attrs
|
|
})
|
|
}
|