Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removed the region from tagging and search private api construction #5832

Draft
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

ujjwal-ibm
Copy link
Collaborator

@ujjwal-ibm ujjwal-ibm commented Dec 3, 2024

Community Note

  • Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
  • Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Relates OR Closes #0000

Output from acceptance testing:

$ make testacc TESTARGS='-run=TestAccXXX'

...

@ujjwal-ibm ujjwal-ibm force-pushed the tagging-private-visibility branch from 0b1868c to 90e3f53 Compare December 3, 2024 15:39
@ujjwal-ibm ujjwal-ibm changed the title Removed the region variable from tagging and search private api const… Removed the region from tagging and search private api construction Dec 3, 2024
@ujjwal-ibm ujjwal-ibm force-pushed the tagging-private-visibility branch from 90e3f53 to 8964294 Compare December 3, 2024 15:41
@ujjwal-ibm
Copy link
Collaborator Author

@luiof @mkrudele @hkantare

@ujjwal-ibm ujjwal-ibm marked this pull request as ready for review December 4, 2024 03:52
@ujjwal-ibm ujjwal-ibm self-assigned this Dec 4, 2024
@argeiger
Copy link

argeiger commented Dec 5, 2024

Tested with visibility set to "private" in us-east

2024-12-05T10:12:49.022-0500 [INFO]  provider.terraform-provider-ibm: 2024/12/05 10:12:49 [Debug] Sending HTTP request message...: timestamp=2024-12-05T10:12:49.022-0500
2024-12-05T10:12:49.022-0500 [INFO]  provider.terraform-provider-ibm: 2024/12/05 10:12:49 [DEBUG] GET https://tags.private.global-search-tagging.cloud.ibm.com/v3/tags?tag_type=access: timestamp=2024-12-05T10:12:49.022-0500
2024-12-05T10:12:49.810-0500 [INFO]  provider.terraform-provider-ibm: 2024/12/05 10:12:49 [Debug] Considering retry attempt; status_code=200, method=GET, url=https://tags.private.global-search-tagging.cloud.ibm.com/v3/tags?tag_type=access, error=nil: timestamp=2024-12-05T10:12:49.810-0500
2024-12-05T10:12:49.810-0500 [INFO]  provider.terraform-provider-ibm: 2024/12/05 10:12:49 [Debug] No retry for status code: 200: timestamp=2024-12-05T10:12:49.810-0500
2024-12-05T10:12:49.810-0500 [INFO]  provider.terraform-provider-ibm: 2024/12/05 10:12:49 [Debug] Received HTTP response message, status code 200: timestamp=2024-12-05T10:12:49.810-0500
2024-12-05T10:12:49.811-0500 [INFO]  provider.terraform-provider-ibm: 2024/12/05 10:12:49 [Debug] Response:
HTTP/2.0 200 OK

Terraform will perform the following actions:

  # ibm_is_security_group.example will be created
  + resource "ibm_is_security_group" "example" {
      + access_tags             = (known after apply)
      + crn                     = (known after apply)
      + id                      = (known after apply)
      + name                    = "example-security-group"
      + resource_controller_url = (known after apply)
      + resource_crn            = (known after apply)
      + resource_group          = (known after apply)
      + resource_group_name     = (known after apply)
      + resource_name           = (known after apply)
      + rules                   = (known after apply)
      + tags                    = [
          + "sg",
          + "test",
        ]
      + vpc                     = "r014-b844255a-2c4e-4f12-817d-4b4f19eddda3"
    }

Plan: 1 to add, 0 to change, 0 to destroy.

@luiof
Copy link
Contributor

luiof commented Dec 5, 2024

I approved the changes since the global private endpoint is valid, however the global private endpoints are reachable in a VPC with a VPE GW attached only; if we try the code from our local machine it will not work. Could we add a reference to the IBM doc and a comment about this? Just to avoid confusion from a customer point of view.
Thank you

@ujjwal-ibm ujjwal-ibm marked this pull request as draft December 5, 2024 16:34
@ocofaigh
Copy link
Contributor

ocofaigh commented Dec 6, 2024

As mention in internal discussions, this won't work for a region like eu-east (which isn't CSE proxy enabled) when running in Schematics or local (unless you use a custom schematics agent with VPE set up).
The suggestion from provider team was:

May be we need to map the region if its us-south/us-east use us-south regional private endpoint
the fix shd be that way else fall back to us-south

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants