added terraform support for cloud_run_revision_filters

datadog/fwprovider/resource_datadog_integration_gcp_sts.go

@@ -36,6 +36,7 @@ type integrationGcpStsModel struct {
 	ClientEmail                    types.String `tfsdk:"client_email"`
 	DelegateAccountEmail           types.String `tfsdk:"delegate_account_email"`
 	HostFilters                    types.Set    `tfsdk:"host_filters"`
+	CloudRunRevisionFilters        types.Set    `tfsdk:"cloud_run_revision_filters"`
 	IsCspmEnabled                  types.Bool   `tfsdk:"is_cspm_enabled"`
 	IsSecurityCommandCenterEnabled types.Bool   `tfsdk:"is_security_command_center_enabled"`
 	ResourceCollectionEnabled      types.Bool   `tfsdk:"resource_collection_enabled"`
@@ -88,6 +89,11 @@ func (r *integrationGcpStsResource) Schema(_ context.Context, _ resource.SchemaR
 				Description: "Your Host Filters.",
 				ElementType: types.StringType,
 			},
+			"cloud_run_revision_filters": schema.SetAttribute{
+				Optional:    true,
+				Description: "Tags to filter which Cloud Run revisions are imported into Datadog. Only revisions that meet specified criteria will be monitored.",
+				ElementType: types.StringType,
+			},
 			"is_cspm_enabled": schema.BoolAttribute{
 				Optional:    true,
 				Computed:    true,
@@ -272,6 +278,9 @@ func (r *integrationGcpStsResource) updateState(ctx context.Context, state *inte
 	if hostFilters, ok := attributes.GetHostFiltersOk(); ok && len(*hostFilters) > 0 {
 		state.HostFilters, _ = types.SetValueFrom(ctx, types.StringType, *hostFilters)
 	}
+	if runFilters, ok := attributes.GetCloudRunRevisionFiltersOk(); ok && len(*runFilters) > 0 {
+		state.CloudRunRevisionFilters, _ = types.SetValueFrom(ctx, types.StringType, *runFilters)
+	}
 	if isCspmEnabled, ok := attributes.GetIsCspmEnabledOk(); ok {
 		state.IsCspmEnabled = types.BoolValue(*isCspmEnabled)
 	}
@@ -309,6 +318,11 @@ func (r *integrationGcpStsResource) buildIntegrationGcpStsRequestBody(ctx contex
 	}
 	attributes.SetHostFilters(hostFilters)
 
+	runFilters := make([]string, 0)
+	if !state.CloudRunRevisionFilters.IsNull() {
+		diags.Append(state.CloudRunRevisionFilters.ElementsAs(ctx, &runFilters, false)...)
+	}
+
 	if !state.IsSecurityCommandCenterEnabled.IsUnknown() {
 		attributes.SetIsSecurityCommandCenterEnabled(state.IsSecurityCommandCenterEnabled.ValueBool())
 	}

datadog/tests/resource_datadog_integration_gcp_sts_test.go

@@ -37,6 +37,10 @@ func TestAccIntegrationGcpStsBasic(t *testing.T) {
 						"datadog_integration_gcp_sts.foo", "resource_collection_enabled", "false"),
 					resource.TestCheckTypeSetElemAttr(
 						"datadog_integration_gcp_sts.foo", "host_filters.*", "tag:one"),
+					resource.TestCheckTypeSetElemAttr(
+						"datadog_integration_gcp_sts.foo", "cloud_run_revision_filters.*", "tag:two"),
+					resource.TestCheckTypeSetElemAttr(
+						"datadog_integration_gcp_sts.foo", "cloud_run_revision_filters.*", "tag:one"),
 					resource.TestCheckTypeSetElemAttr(
 						"datadog_integration_gcp_sts.foo", "host_filters.*", "tag:two"),
 					resource.TestCheckTypeSetElemAttr(
@@ -63,6 +67,8 @@ func TestAccIntegrationGcpStsBasic(t *testing.T) {
 						"datadog_integration_gcp_sts.foo", "resource_collection_enabled", "true"),
 					resource.TestCheckNoResourceAttr(
 						"datadog_integration_gcp_sts.foo", "host_filters"),
+					resource.TestCheckNoResourceAttr(
+						"datadog_integration_gcp_sts.foo", "cloud_run_revision_filters"),
 					resource.TestCheckNoResourceAttr(
 						"datadog_integration_gcp_sts.foo", "account_tags"),
 				),
@@ -92,6 +98,8 @@ func TestAccIntegrationGcpStsDefault(t *testing.T) {
 						"datadog_integration_gcp_sts.foo", "is_cspm_enabled", "false"),
 					resource.TestCheckNoResourceAttr(
 						"datadog_integration_gcp_sts.foo", "host_filters"),
+					resource.TestCheckNoResourceAttr(
+						"datadog_integration_gcp_sts.foo", "cloud_run_revision_filters"),
 				),
 			},
 		},
@@ -104,6 +112,7 @@ resource "datadog_integration_gcp_sts" "foo" {
     automute = "false"
     client_email = "%[email protected]"
     host_filters = ["tag:one", "tag:two"]
+	cloud_run_revision_filters = ["tag:one", "tag:two"]
     is_cspm_enabled = "false"
     resource_collection_enabled = "false"
     is_security_command_center_enabled = "false"