patch_policy

type PatchPolicyDataSource ¶

type PatchPolicyDataSource struct {
	// contains filtered or unexported fields
}

PatchPolicyDataSource implements the Terraform data source for Jamf Pro patch policies. Lookup is by id only, and the reason is no longer the one it used to be: the classic /patchpolicies collection reads that made a name selector an N-GET scan are no longer what this construct enumerates on, and the Pro v2 collection that replaced them accepts a server-side RSQL query on policyName, so a name selector would now cost one filtered list call plus one by-id read. It is therefore unbuilt rather than rejected — note that RSQL string comparison is case-sensitive, so a name selector added here would match exactly, unlike the list resource's deliberately case-insensitive substring filter. The data source surfaces the general fields, including the server-derived ones; manage the policy as a resource for full scope / user_interaction detail.

func (d *PatchPolicyDataSource) Configure(ctx context.Context, req datasource.ConfigureRequest, resp *datasource.ConfigureResponse)

func (d *PatchPolicyDataSource) Metadata(ctx context.Context, req datasource.MetadataRequest, resp *datasource.MetadataResponse)

func (d *PatchPolicyDataSource) Read(ctx context.Context, req datasource.ReadRequest, resp *datasource.ReadResponse)

func (d *PatchPolicyDataSource) Schema(ctx context.Context, req datasource.SchemaRequest, resp *datasource.SchemaResponse)

type PatchPolicyDataSourceModel ¶

type PatchPolicyDataSourceModel struct {
	ID                           types.String             `tfsdk:"id"`
	SoftwareTitleConfigurationID types.String             `tfsdk:"software_title_configuration_id"`
	Name                         types.String             `tfsdk:"name"`
	Enabled                      types.Bool               `tfsdk:"enabled"`
	TargetVersion                types.String             `tfsdk:"target_version"`
	DistributionMethod           types.String             `tfsdk:"distribution_method"`
	AllowDowngrade               types.Bool               `tfsdk:"allow_downgrade"`
	PatchUnknown                 types.Bool               `tfsdk:"patch_unknown"`
	ReleaseDate                  types.Int64              `tfsdk:"release_date"`
	IncrementalUpdate            types.Bool               `tfsdk:"incremental_update"`
	Reboot                       types.Bool               `tfsdk:"reboot"`
	MinimumOS                    types.String             `tfsdk:"minimum_os"`
	KillApps                     types.List               `tfsdk:"kill_apps"`
	Timeouts                     datasourceTimeouts.Value `tfsdk:"timeouts"`
}

PatchPolicyDataSourceModel is the flat data source model. Surfaces a read-only projection of the most-frequently looked-up general fields so users can resolve a policy by ID; manage the policy as a resource for full scope / user_interaction detail.

type PatchPolicyListResource ¶

type PatchPolicyListResource struct {
	// contains filtered or unexported fields
}

PatchPolicyListResource implements Terraform query list support. Enumeration runs on the Pro v2 patch-policies collection; per-item hydration stays on the ProClassic by-ID read, which is the only surface carrying a policy's scope and user-interaction sections.

The optional `filter` block is applied client-side via filters.ApplyClassicFilter after the full list is fetched: v2 accepts an RSQL query on `policyName`, but RSQL string comparison is case-sensitive and this resource's contract is a case-insensitive substring, so filtering server-side would silently narrow it.

func (r *PatchPolicyListResource) Configure(ctx context.Context, req resource.ConfigureRequest, resp *resource.ConfigureResponse)

func (r *PatchPolicyListResource) List(ctx context.Context, req list.ListRequest, stream *list.ListResultsStream)

func (r *PatchPolicyListResource) ListResourceConfigSchema(ctx context.Context, req list.ListResourceSchemaRequest, resp *list.ListResourceSchemaResponse)

func (r *PatchPolicyListResource) Metadata(ctx context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse)

type PatchPolicyListResourceModel ¶

type PatchPolicyListResourceModel struct {
	Filter   *filters.ClassicFilterModel `tfsdk:"filter"`
	Timeouts listtimeouts.Value          `tfsdk:"timeouts"`
}

PatchPolicyListResourceModel represents the config model for list queries. Classic has no RSQL — the filter shape is the shared client-side substring block. Unlike patch software titles, the patch policies list response carries a display name, so the filter matches the policy name.

type PatchPolicyResource ¶

type PatchPolicyResource struct {
	// contains filtered or unexported fields
}

PatchPolicyResource implements the Terraform resource for Jamf Pro patch policies. No directory-service preflight is wired: patch-policy scope exposes no readable name-keyed (LDAP/cloud-IdP) category.

func (r *PatchPolicyResource) Configure(ctx context.Context, req resource.ConfigureRequest, resp *resource.ConfigureResponse)

func (r *PatchPolicyResource) Create(ctx context.Context, req resource.CreateRequest, resp *resource.CreateResponse)

func (r *PatchPolicyResource) Delete(ctx context.Context, req resource.DeleteRequest, resp *resource.DeleteResponse)

func (r *PatchPolicyResource) IdentitySchema(ctx context.Context, req resource.IdentitySchemaRequest, resp *resource.IdentitySchemaResponse)

func (r *PatchPolicyResource) ImportState(ctx context.Context, req resource.ImportStateRequest, resp *resource.ImportStateResponse)

func (r *PatchPolicyResource) Metadata(ctx context.Context, req resource.MetadataRequest, resp *resource.MetadataResponse)

func (r *PatchPolicyResource) ModifyPlan(ctx context.Context, req resource.ModifyPlanRequest, resp *resource.ModifyPlanResponse)

func (r *PatchPolicyResource) Read(ctx context.Context, req resource.ReadRequest, resp *resource.ReadResponse)

func (r *PatchPolicyResource) Schema(ctx context.Context, req resource.SchemaRequest, resp *resource.SchemaResponse)

func (r *PatchPolicyResource) Update(ctx context.Context, req resource.UpdateRequest, resp *resource.UpdateResponse)

type PatchPolicyResourceModel ¶

type PatchPolicyResourceModel struct {
	ID                           types.String                     `tfsdk:"id"`
	SoftwareTitleConfigurationID types.String                     `tfsdk:"software_title_configuration_id"`
	Name                         types.String                     `tfsdk:"name"`
	Enabled                      types.Bool                       `tfsdk:"enabled"`
	TargetVersion                types.String                     `tfsdk:"target_version"`
	DistributionMethod           types.String                     `tfsdk:"distribution_method"`
	AllowDowngrade               types.Bool                       `tfsdk:"allow_downgrade"`
	PatchUnknown                 types.Bool                       `tfsdk:"patch_unknown"`
	ReleaseDate                  types.Int64                      `tfsdk:"release_date"`
	IncrementalUpdate            types.Bool                       `tfsdk:"incremental_update"`
	Reboot                       types.Bool                       `tfsdk:"reboot"`
	MinimumOS                    types.String                     `tfsdk:"minimum_os"`
	KillApps                     types.List                       `tfsdk:"kill_apps"`
	Scope                        *PatchPolicyScopeModel           `tfsdk:"scope"`
	UserInteraction              *PatchPolicyUserInteractionModel `tfsdk:"user_interaction"`
	Timeouts                     resourceTimeouts.Value           `tfsdk:"timeouts"`
}

PatchPolicyResourceModel is the Terraform resource model for a Jamf Pro patch policy (the classic /patchpolicies endpoint). A policy is created against a patch software title configuration (software_title_configuration_id) and targets a single version of that title that has a package assigned.

scope and user_interaction are pointer-typed optional blocks so an undeclared block stays null in state. The classic server echoes both <scope> and <user_interaction> (with full defaults) on every GET, so Read only refreshes a block the caller manages — populating an unmanaged block would violate the framework's "produced inconsistent result after apply" check.

type PatchPolicyScopeExclusionsModel ¶

type PatchPolicyScopeExclusionsModel struct {
	ComputerIDs       types.Set `tfsdk:"computer_ids"`
	ComputerGroupIDs  types.Set `tfsdk:"computer_group_ids"`
	BuildingIDs       types.Set `tfsdk:"building_ids"`
	DepartmentIDs     types.Set `tfsdk:"department_ids"`
	NetworkSegmentIDs types.Set `tfsdk:"network_segment_ids"`
	IbeaconIDs        types.Set `tfsdk:"ibeacon_ids"`
}

PatchPolicyScopeExclusionsModel models <scope><exclusions>: computers, computer groups, buildings, departments, network segments, iBeacons.

type PatchPolicyScopeLimitationsModel ¶

type PatchPolicyScopeLimitationsModel struct {
	NetworkSegmentIDs types.Set `tfsdk:"network_segment_ids"`
	IbeaconIDs        types.Set `tfsdk:"ibeacon_ids"`
}

PatchPolicyScopeLimitationsModel models <scope><limitations>: network segments and iBeacons only.

type PatchPolicyScopeModel ¶

type PatchPolicyScopeModel struct {
	Targets     *PatchPolicyScopeTargetsModel     `tfsdk:"targets"`
	Limitations *PatchPolicyScopeLimitationsModel `tfsdk:"limitations"`
	Exclusions  *PatchPolicyScopeExclusionsModel  `tfsdk:"exclusions"`
}

PatchPolicyScopeModel models <patch_policy><scope>. A LIMITED computer-scope subset (wire-probed): targets are computers / computer_groups / buildings / departments plus the all_computers flag, a limitations block (network segments + iBeacons), and exclusions. NO target users or user groups — the classic GET never returns user-based patch-policy scope even when set, so they are not modelled. Hand-composed from the shared scope primitives.

The all-flag and per-category target ID sets live inside the `targets` sub-block, mirroring the admin UI's Targets / Limitations / Exclusions tabs.

func (m PatchPolicyScopeModel) TargetsOrZero() PatchPolicyScopeTargetsModel

type PatchPolicyScopeTargetsModel ¶

type PatchPolicyScopeTargetsModel struct {
	AllComputers     types.Bool `tfsdk:"all_computers"`
	ComputerIDs      types.Set  `tfsdk:"computer_ids"`
	ComputerGroupIDs types.Set  `tfsdk:"computer_group_ids"`
	BuildingIDs      types.Set  `tfsdk:"building_ids"`
	DepartmentIDs    types.Set  `tfsdk:"department_ids"`
}

PatchPolicyScopeTargetsModel models <scope> targets — the all_computers flag plus the per-category target ID sets, mirroring the admin UI's Targets tab.

type PatchPolicyUserInteractionDeadlinesModel ¶

type PatchPolicyUserInteractionDeadlinesModel struct {
	Enabled types.Bool  `tfsdk:"enabled"`
	Period  types.Int64 `tfsdk:"period"`
}

PatchPolicyUserInteractionDeadlinesModel models <user_interaction><deadlines>.

type PatchPolicyUserInteractionGracePeriodModel ¶

type PatchPolicyUserInteractionGracePeriodModel struct {
	Duration                  types.Int64  `tfsdk:"duration"`
	NotificationCenterSubject types.String `tfsdk:"notification_center_subject"`
	Message                   types.String `tfsdk:"message"`
}

PatchPolicyUserInteractionGracePeriodModel models <user_interaction><grace_period>.

type PatchPolicyUserInteractionModel ¶

type PatchPolicyUserInteractionModel struct {
	InstallButtonText      types.String                                  `tfsdk:"install_button_text"`
	SelfServiceDescription types.String                                  `tfsdk:"self_service_description"`
	SelfServiceIconID      types.String                                  `tfsdk:"self_service_icon_id"`
	Notifications          *PatchPolicyUserInteractionNotificationsModel `tfsdk:"notifications"`
	Deadlines              *PatchPolicyUserInteractionDeadlinesModel     `tfsdk:"deadlines"`
	GracePeriod            *PatchPolicyUserInteractionGracePeriodModel   `tfsdk:"grace_period"`
}

PatchPolicyUserInteractionModel models <patch_policy><user_interaction> — the admin UI "User Interaction" tab. The wrapper and its nested blocks are Optional-only (NOT Optional+Computed) pointer structs: the server echoes a full default superset on GET, and an Optional+Computed SingleNestedAttribute backed by a *struct trips the framework's Unknown-decode at apply (see feedback_optional_computed_nested_object). The leaf scalars inside a declared block ARE Optional+Computed so the server-default null→value transition is legal on create. Read is state-gated: a block is only refreshed when already managed.

type PatchPolicyUserInteractionNotificationsModel ¶

type PatchPolicyUserInteractionNotificationsModel struct {
	Enabled   types.Bool                                             `tfsdk:"enabled"`
	Subject   types.String                                           `tfsdk:"subject"`
	Message   types.String                                           `tfsdk:"message"`
	Type      types.String                                           `tfsdk:"type"`
	Reminders *PatchPolicyUserInteractionNotificationsRemindersModel `tfsdk:"reminders"`
}

PatchPolicyUserInteractionNotificationsModel models <user_interaction><notifications>.

type PatchPolicyUserInteractionNotificationsRemindersModel ¶

type PatchPolicyUserInteractionNotificationsRemindersModel struct {
	Enabled   types.Bool  `tfsdk:"enabled"`
	Frequency types.Int64 `tfsdk:"frequency"`
}

PatchPolicyUserInteractionNotificationsRemindersModel models <user_interaction><notifications><reminders>.