Add etags to acm_service_perimeter_resource (GoogleCloudPlatform#12736)

Author: coder-221

mmv1/products/accesscontextmanager/ServicePerimeterResource.yaml

@@ -70,6 +70,8 @@ custom_code:
   encoder: 'templates/terraform/encoders/access_context_manager_service_perimeter_resource.go.tmpl'
   custom_import: 'templates/terraform/custom_import/access_context_manager_service_perimeter_resource.go.tmpl'
   post_read: 'templates/terraform/post_read/access_context_manager_service_perimeter_resource.go.tmpl'
+  pre_create: 'templates/terraform/pre_create/access_context_manager_service_perimeter_resource.go.tmpl'
+  pre_delete: 'templates/terraform/pre_delete/access_context_manager_service_perimeter_resource.go.tmpl'
 exclude_tgc: true
 # Skipping the sweeper due to the non-standard base_url and because this is fine-grained under ServicePerimeter
 exclude_sweeper: true
@@ -104,3 +106,8 @@ properties:
       The name of the Access Policy this resource belongs to.
     ignore_read: true
     output: true
+  - name: 'etag'
+    type: String
+    output: true
+    description: |
+      The perimeter etag is internally used to prevent overwriting the list of perimeter resources on PATCH calls. It is retrieved from the same GET perimeter API call that's used to get the current list of resources. The resource to add or remove is merged into that list and then this etag is sent with the PATCH call along with the updated resource list.

mmv1/templates/terraform/post_read/access_context_manager_service_perimeter_resource.go.tmpl

@@ -1,4 +1,3 @@
-// post_read template for access_context_manager_service_perimeter_resource
-
-// this is a placeholder for now but in the future we can use this to access
-// the etag from the read response
+if err := d.Set("etag", res["etag"]); err != nil {
+	log.Printf("[ERROR] Unable to set etag: %s", err)
+}

mmv1/templates/terraform/pre_create/access_context_manager_service_perimeter_resource.go.tmpl

@@ -0,0 +1,15 @@
+etag := d.Get("etag").(string)
+
+if etag == "" {
+	log.Printf("[ERROR] Unable to get etag: %s", err)
+	return nil
+}
+obj["etag"] = etag
+
+// updateMask is a URL parameter but not present in the schema, so ReplaceVars
+// won't set it
+updateMask := []string{"status.resources", "etag"}
+url, err = transport_tpg.AddQueryParams(url, map[string]string{"updateMask": strings.Join(updateMask, ",")})
+if err != nil {
+	return err
+}

mmv1/templates/terraform/pre_delete/access_context_manager_service_perimeter_resource.go.tmpl

@@ -0,0 +1,15 @@
+etag := d.Get("etag").(string)
+
+if etag == "" {
+	log.Printf("[ERROR] Unable to get etag: %s", err)
+	return nil
+}
+obj["etag"] = etag
+
+// updateMask is a URL parameter but not present in the schema, so ReplaceVars
+// won't set it
+updateMask := []string{"status.resources", "etag"}
+url, err = transport_tpg.AddQueryParams(url, map[string]string{"updateMask": strings.Join(updateMask, ",")})
+if err != nil {
+	return err
+}