pingone_davinci_application_flow_policy beta resource

betatemplates/resources/davinci_application_flow_policy.md.tmpl

@@ -0,0 +1,26 @@
+---
+page_title: "{{.Name}} {{.Type}} - {{.RenderedProviderName}}"
+subcategory: "DaVinci"
+description: |-
+{{ .Description | plainmarkdown | trimspace | prefixlines "  " }}
+---
+
+# {{.Name}} ({{.Type}})
+
+{{ .Description | trimspace }}
+
+{{ if .HasExample -}}
+## Example Usage
+
+{{ tffile (printf "%s%s%s" "examples/resources/" .Name "/resource.tf") }}
+{{- end }}
+
+{{ .SchemaMarkdown | trimspace }}
+
+{{ if .HasImport -}}
+## Import
+
+Import is supported using the following syntax, where attributes in `<>` brackets are replaced with the relevant ID.  For example, `<environment_id>` should be replaced with the ID of the environment to import from.
+
+{{ codefile "shell" (printf "%s%s%s" "examples/resources/" .Name "/import.sh") }}
+{{- end }}

examples/resources/pingone_davinci_application_flow_policy/import.sh

@@ -0,0 +1 @@
+terraform import pingone_davinci_application_flow_policy.example <environment_id>/<application_id>/<flow_policy_id>

examples/resources/pingone_davinci_application_flow_policy/resource.tf

@@ -0,0 +1,28 @@
+resource "pingone_davinci_application" "my_awesome_registration_flow_application" {
+  environment_id = var.pingone_environment_id
+
+  name = "My Awesome Registration Application"
+
+  oauth {
+    grant_types                   = ["authorizationCode"]
+    scopes                        = ["openid", "profile"]
+    enforce_signed_request_openid = false
+    redirect_uris                 = ["https://auth.pingone.com/0000-0000-000/rp/callback/openid_connect"]
+  }
+}
+
+resource "pingone_davinci_application_flow_policy" "my_awesome_registration_flow_application_policy" {
+  environment_id = var.pingone_environment_id
+  application_id = pingone_davinci_application.my_awesome_registration_flow_application.id
+
+  name   = "PingOne - Registration"
+  status = "enabled"
+
+  flow_distributions = [
+    {
+      id      = pingone_davinci_flow.registration.id
+      version = -1
+      weight  = 100
+    }
+  ]
+}

internal/service/davinci/resource_davinci_application.go

@@ -10,6 +10,7 @@ import (
 	"net/http"
 
 	"github.com/google/uuid"
+	"github.com/hashicorp/terraform-plugin-framework/attr"
 	"github.com/hashicorp/terraform-plugin-framework/diag"
 	"github.com/hashicorp/terraform-plugin-framework/path"
 	"github.com/hashicorp/terraform-plugin-framework/resource"
@@ -18,6 +19,43 @@ import (
 	"github.com/pingidentity/terraform-provider-pingone/internal/framework"
 )
 
+var (
+	davinciApplicationApiKeyDefault = types.ObjectValueMust(map[string]attr.Type{
+		"enabled": types.BoolType,
+		"value":   types.StringType,
+	}, map[string]attr.Value{
+		"enabled": types.BoolValue(true),
+		"value":   types.StringUnknown(),
+	})
+	davinciApplicationOauthGrantTypesDefault = types.SetValueMust(types.StringType, []attr.Value{
+		types.StringValue("authorizationCode"),
+	})
+	davinciApplicationOauthScopesDefault = types.SetValueMust(types.StringType, []attr.Value{
+		types.StringValue("openid"),
+		types.StringValue("profile"),
+	})
+	emptySetDefault                = types.SetValueMust(types.StringType, nil)
+	davinciApplicationOauthDefault = types.ObjectValueMust(map[string]attr.Type{
+		"client_secret":                 types.StringType,
+		"enforce_signed_request_openid": types.BoolType,
+		"grant_types":                   types.SetType{ElemType: types.StringType},
+		"logout_uris":                   types.SetType{ElemType: types.StringType},
+		"redirect_uris":                 types.SetType{ElemType: types.StringType},
+		"scopes":                        types.SetType{ElemType: types.StringType},
+		"sp_jwks_openid":                types.StringType,
+		"sp_jwks_url":                   types.StringType,
+	}, map[string]attr.Value{
+		"client_secret":                 types.StringUnknown(),
+		"enforce_signed_request_openid": types.BoolValue(false),
+		"grant_types":                   davinciApplicationOauthGrantTypesDefault,
+		"logout_uris":                   emptySetDefault,
+		"redirect_uris":                 emptySetDefault,
+		"scopes":                        davinciApplicationOauthScopesDefault,
+		"sp_jwks_openid":                types.StringNull(),
+		"sp_jwks_url":                   types.StringNull(),
+	})
+)
+
 // Build the PUT client struct to be used after initial creation
 func (model *davinciApplicationResourceModel) buildClientStructPutAfterCreate(createResponse *pingone.DaVinciApplicationResponse) (*pingone.DaVinciApplicationReplaceRequest, diag.Diagnostics) {
 	result := &pingone.DaVinciApplicationReplaceRequest{}