Add apply_only argument. Add force_conflicts option. (#148)

* add apply_only argument
* add force_conflicts option.
* It is obvious not to load the config if the exec is explicitly mentioned.
#119

Author: kahirokunn

docs/resources/kubectl_manifest.md

@@ -42,6 +42,8 @@ YAML
 * `sensitive_fields` - Optional. List of fields (dot-syntax) which are sensitive and should be obfuscated in output. Defaults to `["data"]` for Secrets.
 * `force_new` - Optional. Forces delete & create of resources if the `yaml_body` changes. Default `false`.
 * `server_side_apply` - Optional. Allow using server-side-apply method. Default `false`.
+* `force_conflicts` - Optional. Allow using force_conflicts. Default `false`.
+* `apply_only` - Optional. It does not delete resource in any case Default `false`.
 * `ignore_fields` - Optional. List of map fields to ignore when applying the manifest. See below for more details.
 * `override_namespace` - Optional. Override the namespace to apply the kubernetes resource to, ignoring any declared namespace in the `yaml_body`.
 * `validate_schema` - Optional. Setting to `false` will mimic `kubectl apply --validate=false` mode. Default `true`.
@@ -73,7 +75,7 @@ resource "kubectl_manifest" "test" {
     sensitive_fields = [
         "metadata.annotations.my-secret-annotation"
     ]
-    
+
     yaml_body = <<YAML
 apiVersion: admissionregistration.k8s.io/v1beta1
 kind: MutatingWebhookConfiguration

kubernetes/provider.go

@@ -279,7 +279,20 @@ func initializeConfiguration(d *schema.ResourceData) (*restclient.Config, error)
 		configPaths = filepath.SplitList(v)
 	}
 
-	if d.Get("load_config_file").(bool) && len(configPaths) > 0 {
+	if v, ok := d.GetOk("exec"); ok {
+		exec := &clientcmdapi.ExecConfig{}
+		if spec, ok := v.([]interface{})[0].(map[string]interface{}); ok {
+			exec.APIVersion = spec["api_version"].(string)
+			exec.Command = spec["command"].(string)
+			exec.Args = expandStringSlice(spec["args"].([]interface{}))
+			for kk, vv := range spec["env"].(map[string]interface{}) {
+				exec.Env = append(exec.Env, clientcmdapi.ExecEnvVar{Name: kk, Value: vv.(string)})
+			}
+		} else {
+			return nil, fmt.Errorf("Failed to parse exec")
+		}
+		overrides.AuthInfo.Exec = exec
+	} else if d.Get("load_config_file").(bool) && len(configPaths) > 0 {
 		expandedPaths := []string{}
 		for _, p := range configPaths {
 			path, err := homedir.Expand(p)
@@ -361,21 +374,6 @@ func initializeConfiguration(d *schema.ResourceData) (*restclient.Config, error)
 		overrides.AuthInfo.Token = v.(string)
 	}
 
-	if v, ok := d.GetOk("exec"); ok {
-		exec := &clientcmdapi.ExecConfig{}
-		if spec, ok := v.([]interface{})[0].(map[string]interface{}); ok {
-			exec.APIVersion = spec["api_version"].(string)
-			exec.Command = spec["command"].(string)
-			exec.Args = expandStringSlice(spec["args"].([]interface{}))
-			for kk, vv := range spec["env"].(map[string]interface{}) {
-				exec.Env = append(exec.Env, clientcmdapi.ExecEnvVar{Name: kk, Value: vv.(string)})
-			}
-		} else {
-			return nil, fmt.Errorf("Failed to parse exec")
-		}
-		overrides.AuthInfo.Exec = exec
-	}
-
 	cc := clientcmd.NewNonInteractiveDeferredLoadingClientConfig(loader, overrides)
 	cfg, err := cc.ClientConfig()
 	if err != nil {

kubernetes/resource_kubectl_manifest.go

@@ -187,6 +187,7 @@ metadata:
 				_ = d.Set("name", metaObjLive.GetName())
 				_ = d.Set("force_new", false)
 				_ = d.Set("server_side_apply", false)
+				_ = d.Set("apply_only", false)
 
 				// clear out fields user can't set to try and get parity with yaml_body
 				meta_v1_unstruct.RemoveNestedField(metaObjLive.Raw.Object, "metadata", "creationTimestamp")
@@ -396,6 +397,18 @@ var (
 			Optional:    true,
 			Default:     false,
 		},
+		"force_conflicts": {
+			Type:        schema.TypeBool,
+			Description: "Default false.",
+			Optional:    true,
+			Default:     false,
+		},
+		"apply_only": {
+			Type:        schema.TypeBool,
+			Description: "Apply only. In other words, it does not delete resource in any case.",
+			Optional:    true,
+			Default:     false,
+		},
 		"ignore_fields": {
 			Type:        schema.TypeList,
 			Elem:        &schema.Schema{Type: schema.TypeString},
@@ -478,6 +491,10 @@ func resourceKubectlManifestApply(ctx context.Context, d *schema.ResourceData, m
 		applyOptions.FieldManager = "kubectl"
 	}
 
+	if d.Get("force_conflicts").(bool) {
+		applyOptions.ForceConflicts = true
+	}
+
 	if manifest.HasNamespace() {
 		applyOptions.Namespace = manifest.GetNamespace()
 	}
@@ -596,6 +613,9 @@ func resourceKubectlManifestReadUsingClient(ctx context.Context, d *schema.Resou
 }
 
 func resourceKubectlManifestDelete(ctx context.Context, d *schema.ResourceData, meta interface{}) error {
+	if d.Get("apply_only").(bool) {
+		return nil
+	}
 	yamlBody := d.Get("yaml_body").(string)
 	manifest, err := yaml.ParseYAML(yamlBody)
 	if err != nil {