feature: add Ephemeral WriteOnly attributes support (#13126) (#3484)

[upstream:6f9117a459fe10f7c00e22e63865ba61ea4ac6bb]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

tfplan2cai/converters/google/resources/services/bigquerydatatransfer/bigquerydatatransfer_config.go

@@ -30,6 +30,7 @@ import (
 )
 
 var sensitiveParams = []string{"secret_access_key"}
+var sensitiveWoParams = []string{"secret_access_key_wo"}
 
 func sensitiveParamCustomizeDiff(_ context.Context, diff *schema.ResourceDiff, v interface{}) error {
 	for _, sp := range sensitiveParams {
@@ -189,6 +190,12 @@ func GetBigqueryDataTransferConfigApiObject(d tpgresource.TerraformResourceData,
 	} else if v, ok := d.GetOkExists("params"); !tpgresource.IsEmptyValue(reflect.ValueOf(paramsProp)) && (ok || !reflect.DeepEqual(v, paramsProp)) {
 		obj["params"] = paramsProp
 	}
+	sensitiveParamsWoVersionProp, err := expandBigqueryDataTransferConfigSensitiveParamsWoVersion(d.Get("sensitive_params_wo_version"), d, config)
+	if err != nil {
+		return nil, err
+	} else if v, ok := d.GetOkExists("sensitive_params_wo_version"); !tpgresource.IsEmptyValue(reflect.ValueOf(sensitiveParamsWoVersionProp)) && (ok || !reflect.DeepEqual(v, sensitiveParamsWoVersionProp)) {
+		obj["sensitiveParamsWoVersion"] = sensitiveParamsWoVersionProp
+	}
 
 	return resourceBigqueryDataTransferConfigEncoder(d, config, obj)
 }
@@ -358,3 +365,7 @@ func expandBigqueryDataTransferConfigParams(v interface{}, d tpgresource.Terrafo
 	}
 	return m, nil
 }
+
+func expandBigqueryDataTransferConfigSensitiveParamsWoVersion(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}

tfplan2cai/converters/google/resources/services/compute/compute_disk.go

@@ -608,13 +608,41 @@ func expandComputeDiskDiskEncryptionKey(v interface{}, d tpgresource.TerraformRe
 		transformed["rawKey"] = transformedRawKey
 	}
 
+	transformedRawKeyWoVersion, err := expandComputeDiskDiskEncryptionKeyRawKeyWoVersion(original["raw_key_wo_version"], d, config)
+	if err != nil {
+		return nil, err
+	} else if val := reflect.ValueOf(transformedRawKeyWoVersion); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+		transformed["rawKeyWoVersion"] = transformedRawKeyWoVersion
+	}
+
+	transformedRawKeyWo, err := expandComputeDiskDiskEncryptionKeyRawKeyWo(original["raw_key_wo"], d, config)
+	if err != nil {
+		return nil, err
+	} else if val := reflect.ValueOf(transformedRawKeyWo); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+		transformed["rawKeyWo"] = transformedRawKeyWo
+	}
+
+	transformedRsaEncryptedKeyWoVersion, err := expandComputeDiskDiskEncryptionKeyRsaEncryptedKeyWoVersion(original["rsa_encrypted_key_wo_version"], d, config)
+	if err != nil {
+		return nil, err
+	} else if val := reflect.ValueOf(transformedRsaEncryptedKeyWoVersion); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+		transformed["rsaEncryptedKeyWoVersion"] = transformedRsaEncryptedKeyWoVersion
+	}
+
 	transformedRsaEncryptedKey, err := expandComputeDiskDiskEncryptionKeyRsaEncryptedKey(original["rsa_encrypted_key"], d, config)
 	if err != nil {
 		return nil, err
 	} else if val := reflect.ValueOf(transformedRsaEncryptedKey); val.IsValid() && !tpgresource.IsEmptyValue(val) {
 		transformed["rsaEncryptedKey"] = transformedRsaEncryptedKey
 	}
 
+	transformedRsaEncryptedKeyWo, err := expandComputeDiskDiskEncryptionKeyRsaEncryptedKeyWo(original["rsa_encrypted_key_wo"], d, config)
+	if err != nil {
+		return nil, err
+	} else if val := reflect.ValueOf(transformedRsaEncryptedKeyWo); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+		transformed["rsaEncryptedKeyWo"] = transformedRsaEncryptedKeyWo
+	}
+
 	transformedSha256, err := expandComputeDiskDiskEncryptionKeySha256(original["sha256"], d, config)
 	if err != nil {
 		return nil, err
@@ -643,10 +671,26 @@ func expandComputeDiskDiskEncryptionKeyRawKey(v interface{}, d tpgresource.Terra
 	return v, nil
 }
 
+func expandComputeDiskDiskEncryptionKeyRawKeyWoVersion(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
+func expandComputeDiskDiskEncryptionKeyRawKeyWo(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
+func expandComputeDiskDiskEncryptionKeyRsaEncryptedKeyWoVersion(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
 func expandComputeDiskDiskEncryptionKeyRsaEncryptedKey(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
 	return v, nil
 }
 
+func expandComputeDiskDiskEncryptionKeyRsaEncryptedKeyWo(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
 func expandComputeDiskDiskEncryptionKeySha256(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
 	return v, nil
 }

tfplan2cai/converters/google/resources/services/compute/compute_region_disk.go

@@ -217,6 +217,20 @@ func expandComputeRegionDiskDiskEncryptionKey(v interface{}, d tpgresource.Terra
 		transformed["rawKey"] = transformedRawKey
 	}
 
+	transformedRawKeyWo, err := expandComputeRegionDiskDiskEncryptionKeyRawKeyWo(original["raw_key_wo"], d, config)
+	if err != nil {
+		return nil, err
+	} else if val := reflect.ValueOf(transformedRawKeyWo); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+		transformed["rawKeyWo"] = transformedRawKeyWo
+	}
+
+	transformedRawKeyWoVersion, err := expandComputeRegionDiskDiskEncryptionKeyRawKeyWoVersion(original["raw_key_wo_version"], d, config)
+	if err != nil {
+		return nil, err
+	} else if val := reflect.ValueOf(transformedRawKeyWoVersion); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+		transformed["rawKeyWoVersion"] = transformedRawKeyWoVersion
+	}
+
 	transformedSha256, err := expandComputeRegionDiskDiskEncryptionKeySha256(original["sha256"], d, config)
 	if err != nil {
 		return nil, err
@@ -238,6 +252,14 @@ func expandComputeRegionDiskDiskEncryptionKeyRawKey(v interface{}, d tpgresource
 	return v, nil
 }
 
+func expandComputeRegionDiskDiskEncryptionKeyRawKeyWo(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
+func expandComputeRegionDiskDiskEncryptionKeyRawKeyWoVersion(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
 func expandComputeRegionDiskDiskEncryptionKeySha256(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
 	return v, nil
 }

tfplan2cai/converters/google/resources/services/secretmanager/secretmanager_secret_version.go

@@ -122,7 +122,6 @@ func expandSecretManagerSecretVersionPayload(v interface{}, d tpgresource.Terraf
 	} else if val := reflect.ValueOf(transformedSecretData); val.IsValid() && !tpgresource.IsEmptyValue(val) {
 		transformed["data"] = transformedSecretData
 	}
-
 	return transformed, nil
 }