Add Azure CCES resource (#294)

Draper1 · web-flow · commit 012e6b04fb60 · 2025-11-07T16:23:29.000Z
diff --git a/docs/resources/aws_cloud_cluster.md b/docs/resources/aws_cloud_cluster.md
@@ -1,23 +1,29 @@
 ---
-# generated by https://github.com/hashicorp/terraform-plugin-docs
 page_title: "polaris_aws_cloud_cluster Resource - terraform-provider-polaris"
 subcategory: ""
 description: |-
-  The polaris_aws_cloud_cluster resource creates an AWS cloud cluster using RSC.
-  This resource creates a Rubrik Cloud Data Management (CDM) cluster with elastic storage
-  in AWS using the specified configuration. The cluster will be deployed with the specified
-  number of nodes, instance types, and network configuration.
-  ~> Note: This resource creates actual AWS infrastructure. Destroying the
-  resource will attempt to clean up the created resources, but manual cleanup
-  may be required.
-  ~> Note: The AWS account must be onboarded to RSC with the Server and Apps
-  feature enabled before creating a cloud cluster.
-  ~> Note: Cloud Cluster Removal is not supported via terraform yet. The cluster
-  will be removed from state and you must remove the cluster through the RSC UI.
+  
+The `polaris_aws_cloud_cluster` resource creates an AWS cloud cluster using RSC.
+
+This resource creates a Rubrik Cloud Data Management (CDM) cluster with elastic storage 
+in AWS using the specified configuration. The cluster will be deployed with the specified
+number of nodes, instance types, and network configuration.
+
+~> **Note:** This resource creates actual AWS infrastructure. Destroying the
+   resource will attempt to clean up the created resources, but manual cleanup
+   may be required.
+
+~> **Note:** The AWS account must be onboarded to RSC with the Server and Apps
+   feature enabled before creating a cloud cluster.
+
+~> **Note:** Cloud Cluster Removal is not supported via terraform yet. The cluster
+   will be removed from state and you must remove the cluster through the RSC UI.
+
 ---
 
 # polaris_aws_cloud_cluster (Resource)
 
+
 The `polaris_aws_cloud_cluster` resource creates an AWS cloud cluster using RSC.
 
 This resource creates a Rubrik Cloud Data Management (CDM) cluster with elastic storage 
@@ -34,6 +40,8 @@ number of nodes, instance types, and network configuration.
 ~> **Note:** Cloud Cluster Removal is not supported via terraform yet. The cluster
    will be removed from state and you must remove the cluster through the RSC UI.
 
+
+
 ## Example Usage
 
 ```terraform
@@ -67,7 +75,6 @@ resource "polaris_aws_cloud_cluster" "example" {
 }
 ```
 
-<!-- schema generated by tfplugindocs -->
 ## Schema
 
 ### Required
@@ -132,6 +139,6 @@ Read-Only:
 
 Optional:
 
-- `create` (String)
-- `default` (String)
-- `read` (String)
+- `create` (String) Create resource timeout (defaults to `60m`).
+- `default` (String) Default resource timeout (defaults to `20m`).
+- `read` (String) Read resource timeout (defaults to `20m`).
diff --git a/docs/resources/azure_cloud_cluster.md b/docs/resources/azure_cloud_cluster.md
@@ -0,0 +1,149 @@
+---
+page_title: "polaris_azure_cloud_cluster Resource - terraform-provider-polaris"
+subcategory: ""
+description: |-
+  
+The `polaris_azure_cloud_cluster` resource creates an Azure cloud cluster using RSC.
+
+This resource creates a Rubrik Cloud Data Management (CDM) cluster with elastic storage
+in Azure using the specified configuration. The cluster will be deployed with the specified
+number of nodes, instance types, and network configuration.
+
+~> **Note:** This resource creates actual Azure infrastructure. Destroying the
+   resource will attempt to clean up the created resources, but manual cleanup
+   may be required.
+
+~> **Note:** The Azure subscription must be onboarded to RSC with the Server and Apps
+   feature enabled before creating a cloud cluster.
+
+~> **Note:** Cloud Cluster Removal is not supported via terraform yet. The cluster
+   will be removed from state and you must remove the cluster through the RSC UI.
+
+---
+
+# polaris_azure_cloud_cluster (Resource)
+
+
+The `polaris_azure_cloud_cluster` resource creates an Azure cloud cluster using RSC.
+
+This resource creates a Rubrik Cloud Data Management (CDM) cluster with elastic storage
+in Azure using the specified configuration. The cluster will be deployed with the specified
+number of nodes, instance types, and network configuration.
+
+~> **Note:** This resource creates actual Azure infrastructure. Destroying the
+   resource will attempt to clean up the created resources, but manual cleanup
+   may be required.
+
+~> **Note:** The Azure subscription must be onboarded to RSC with the Server and Apps
+   feature enabled before creating a cloud cluster.
+
+~> **Note:** Cloud Cluster Removal is not supported via terraform yet. The cluster
+   will be removed from state and you must remove the cluster through the RSC UI.
+
+
+
+## Example Usage
+
+```terraform
+# Create an Azure cloud cluster using RSC
+resource "polaris_azure_cloud_cluster" "example" {
+  cloud_account_id = "12345678-1234-1234-1234-123456789012"
+
+  cluster_config {
+    cluster_name            = "my-cloud-cluster"
+    admin_email             = "admin@example.com"
+    admin_password          = "RubrikGoForward!"
+    dns_name_servers        = ["8.8.8.8", "8.8.4.4"]
+    dns_search_domains      = ["example.com"]
+    ntp_servers             = ["pool.ntp.org"]
+    num_nodes               = 3
+    keep_cluster_on_failure = false
+  }
+
+  vm_config {
+    cdm_version                     = "9.2.3-p7-29713"
+    instance_type                   = "STANDARD_D8S_V5"
+    location                        = "westus"
+    resource_group                  = "my-resource-group"
+    network_resource_group          = "my-network-resource-group"
+    vnet_resource_group             = "my-vnet-resource-group"
+    subnet                          = "my-subnet"
+    vnet                            = "my-vnet"
+    network_security_group          = "my-network-security-group"
+    network_security_resource_group = "my-network-security-resource-group"
+    vm_type                         = "EXTRA_DENSE"
+  }
+}
+```
+
+## Schema
+
+### Required
+
+- `cloud_account_id` (String) RSC cloud account ID (UUID).
+- `cluster_config` (Block List, Min: 1, Max: 1) Configuration for the cloud cluster. Changing this forces a new resource to be created. (see [below for nested schema](#nestedblock--cluster_config))
+- `vm_config` (Block List, Min: 1, Max: 1) VM configuration for the cluster nodes. Changing this forces a new resource to be created. (see [below for nested schema](#nestedblock--vm_config))
+
+### Optional
+
+- `timeouts` (Block, Optional) (see [below for nested schema](#nestedblock--timeouts))
+
+### Read-Only
+
+- `id` (String) Cloud cluster ID (UUID).
+
+<a id="nestedblock--cluster_config"></a>
+### Nested Schema for `cluster_config`
+
+Required:
+
+- `admin_email` (String) Email address for the cluster admin user. Changing this value will have no effect on the cluster.
+- `admin_password` (String, Sensitive) Password for the cluster admin user. Changing this value will have no effect on the cluster.
+- `cluster_name` (String) Unique name to assign to the cloud cluster. Changing this forces a new resource to be created.
+- `dns_name_servers` (List of String) DNS name servers for the cluster. Changing this forces a new resource to be created.
+- `keep_cluster_on_failure` (Boolean) Whether to keep the cluster on failure (can be useful for troubleshooting). Changing this forces a new resource to be created.
+- `ntp_servers` (List of String) NTP servers for the cluster. Changing this forces a new resource to be created.
+- `num_nodes` (Number) Number of nodes in the cluster. Changing this forces a new resource to be created.
+
+Optional:
+
+- `dns_search_domains` (List of String) DNS search domains for the cluster. Changing this forces a new resource to be created.
+
+
+<a id="nestedblock--vm_config"></a>
+### Nested Schema for `vm_config`
+
+Required:
+
+- `cdm_version` (String) CDM version to use. Changing this forces a new resource to be created.
+- `container_name` (String) Azure storage container name for the cluster. Changing this forces a new resource to be created.
+- `enable_immutability` (Boolean) Whether to enable immutability for the storage account. Changing this forces a new resource to be created.
+- `instance_type` (String) Azure instance type for the cluster nodes. Allowed values are `STANDARD_DS5_V2`, `STANDARD_D16S_V5`, `STANDARD_D8S_V5`, `STANDARD_D32S_V5`, `STANDARD_E16S_V5`, `STANDARD_D8AS_V5`, `STANDARD_D16AS_V5`, `STANDARD_D32AS_V5` and `STANDARD_E16AS_V5`. Changing this forces a new resource to be created.
+- `network_resource_group` (String) Azure resource group name for network resources. Changing this forces a new resource to be created.
+- `network_security_group` (String) Azure network security group name. Changing this forces a new resource to be created.
+- `network_security_resource_group` (String) Azure resource group name for the network security group. Changing this forces a new resource to be created.
+- `region` (String) Azure region to deploy the cluster in. The format should be the native Azure format, e.g. `eastus`, `westus`, etc. Changing this forces a new resource to be created.
+- `resource_group_name` (String) Azure resource group name where the cluster will be deployed. Changing this forces a new resource to be created.
+- `storage_account_name` (String) Azure storage account name for the cluster. Changing this forces a new resource to be created.
+- `subnet` (String) Azure subnet name for the cluster nodes. Changing this forces a new resource to be created.
+- `user_assigned_managed_identity_name` (String) Name of the user-assigned managed identity. Changing this forces a new resource to be created.
+- `vnet` (String) Azure virtual network name. Changing this forces a new resource to be created.
+- `vnet_resource_group` (String) Azure resource group name for the virtual network. Changing this forces a new resource to be created.
+
+Optional:
+
+- `vm_type` (String) VM type for the cluster. Changing this forces a new resource to be created. Possible values are `STANDARD`, `DENSE` and `EXTRA_DENSE`. `DENSE` is recommended for CCES.
+
+Read-Only:
+
+- `cdm_product` (String) CDM Product Code. This is a read-only field and computed based on the CDM version.
+
+
+<a id="nestedblock--timeouts"></a>
+### Nested Schema for `timeouts`
+
+Optional:
+
+- `create` (String) Create resource timeout (defaults to `60m`).
+- `default` (String) Default resource timeout (defaults to `20m`).
+- `read` (String) Read resource timeout (defaults to `20m`).
diff --git a/examples/resources/polaris_azure_cloud_cluster/resource.tf b/examples/resources/polaris_azure_cloud_cluster/resource.tf
@@ -0,0 +1,29 @@
+# Create an Azure cloud cluster using RSC
+resource "polaris_azure_cloud_cluster" "example" {
+  cloud_account_id = "12345678-1234-1234-1234-123456789012"
+
+  cluster_config {
+    cluster_name            = "my-cloud-cluster"
+    admin_email             = "admin@example.com"
+    admin_password          = "RubrikGoForward!"
+    dns_name_servers        = ["8.8.8.8", "8.8.4.4"]
+    dns_search_domains      = ["example.com"]
+    ntp_servers             = ["pool.ntp.org"]
+    num_nodes               = 3
+    keep_cluster_on_failure = false
+  }
+
+  vm_config {
+    cdm_version                     = "9.2.3-p7-29713"
+    instance_type                   = "STANDARD_D8S_V5"
+    location                        = "westus"
+    resource_group                  = "my-resource-group"
+    network_resource_group          = "my-network-resource-group"
+    vnet_resource_group             = "my-vnet-resource-group"
+    subnet                          = "my-subnet"
+    vnet                            = "my-vnet"
+    network_security_group          = "my-network-security-group"
+    network_security_resource_group = "my-network-security-resource-group"
+    vm_type                         = "EXTRA_DENSE"
+  }
+}
diff --git a/go.mod b/go.mod
@@ -9,7 +9,7 @@ require (
 	github.com/hashicorp/terraform-plugin-docs v0.22.0
 	github.com/hashicorp/terraform-plugin-log v0.9.0
 	github.com/hashicorp/terraform-plugin-sdk/v2 v2.34.0
-	github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.10-0.20251022121019-f78d91b1dbf6
+	github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.9-0.20251106131905-3185657b9893
 )
 
 require (
diff --git a/go.sum b/go.sum
@@ -262,8 +262,8 @@ github.com/posener/complete v1.2.3/go.mod h1:WZIdtGGp+qx0sLrYKtIRAruyNpv6hFCicSg
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
-github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.10-0.20251022121019-f78d91b1dbf6 h1:shreRs9YP5v1cQUBDkaoE/AKajQM4ahiGTuYt1rfY5E=
-github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.10-0.20251022121019-f78d91b1dbf6/go.mod h1:JyDKo1NGAjsKb7IR31EqDXC3nu6RH/4PXvW3l39qTXE=
+github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.9-0.20251106131905-3185657b9893 h1:wr7CEHlXdNvVc2Ui5s8By5w5uC2RgW4MCXR1FKoLxuY=
+github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.9-0.20251106131905-3185657b9893/go.mod h1:JyDKo1NGAjsKb7IR31EqDXC3nu6RH/4PXvW3l39qTXE=
 github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
 github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
 github.com/shopspring/decimal v1.2.0/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
diff --git a/internal/provider/names.go b/internal/provider/names.go
@@ -111,6 +111,9 @@ const (
 	keyManagementSubnetMask                         = "management_subnet_mask"
 	keyManifest                                     = "manifest"
 	keyName                                         = "name"
+	keyNetworkResourceGroup                         = "network_resource_group"
+	keyNetworkSecurityGroup                         = "network_security_group"
+	keyNetworkSecurityResourceGroup                 = "network_security_resource_group"
 	keyNativeID                                     = "native_id"
 	keyNodeConfig                                   = "node_config"
 	keyNodeSecurityGroupID                          = "node_security_group_id"
@@ -154,6 +157,7 @@ const (
 	keyPolarisAWSExocomputeClusterAttachment        = "polaris_aws_exocompute_cluster_attachment"
 	keyPolarisAWSPrivateContainerRegistry           = "polaris_aws_private_container_registry"
 	keyPolarisAzureArchivalLocation                 = "polaris_azure_archival_location"
+	keyPolarisAzureCloudCluster                     = "polaris_azure_cloud_cluster"
 	keyPolarisAzureCustomTags                       = "polaris_azure_custom_tags"
 	keyPolarisAzureExocompute                       = "polaris_azure_exocompute"
 	keyPolarisAzureExocomputeClusterAttachment      = "polaris_azure_exocompute_cluster_attachment"
@@ -221,6 +225,7 @@ const (
 	keySSOGroupID                                   = "sso_group_id"
 	keyStackARN                                     = "stack_arn"
 	keyStatus                                       = "status"
+	keyStorageAccountName                           = "storage_account_name"
 	keyStorageAccountNamePrefix                     = "storage_account_name_prefix"
 	keyStorageAccountRegion                         = "storage_account_region"
 	keyStorageAccountTags                           = "storage_account_tags"
@@ -261,6 +266,8 @@ const (
 	keyUsers                                        = "users"
 	keyVaultName                                    = "vault_name"
 	keyVersion                                      = "version"
+	keyVnet                                         = "vnet"
+	keyVnetResourceGroup                            = "vnet_resource_group"
 	keyVPCID                                        = "vpc_id"
 	keyWaitForCompletion                            = "wait_for_completion"
 )
diff --git a/internal/provider/provider.go b/internal/provider/provider.go
@@ -83,6 +83,7 @@ func Provider() *schema.Provider {
 			keyPolarisAWSExocomputeClusterAttachment:     resourceAwsExocomputeClusterAttachment(),
 			keyPolarisAWSPrivateContainerRegistry:        resourceAwsPrivateContainerRegistry(),
 			keyPolarisAzureArchivalLocation:              resourceAzureArchivalLocation(),
+			keyPolarisAzureCloudCluster:                  resourceAzureCloudCluster(),
 			keyPolarisAzureCustomTags:                    resourceAzureCustomTags(),
 			keyPolarisAzureExocompute:                    resourceAzureExocompute(),
 			keyPolarisAzureExocomputeClusterAttachment:   resourceAzureExocomputeClusterAttachment(),
diff --git a/internal/provider/resource_aws_cloud_cluster.go b/internal/provider/resource_aws_cloud_cluster.go
@@ -54,6 +54,9 @@ number of nodes, instance types, and network configuration.
    will be removed from state and you must remove the cluster through the RSC UI.
 `
 
+// This resource uses a template for its documentation due to a bug in the TF
+// docs generator. Remember to update the template if the documentation for any
+// fields are changed.
 func resourceAwsCloudCluster() *schema.Resource {
 	return &schema.Resource{
 		CreateContext: awsCreateCloudCluster,
@@ -323,13 +326,13 @@ func awsCreateCloudCluster(ctx context.Context, d *schema.ResourceData, m any) d
 	}
 
 	vmConfig := gqlcloudcluster.AwsVmConfig{
-		CdmVersion:          vmConfigMap[keyCDMVersion].(string),
+		CDMVersion:          vmConfigMap[keyCDMVersion].(string),
 		InstanceProfileName: vmConfigMap[keyInstanceProfileName].(string),
 		InstanceType:        instanceType,
 		SecurityGroups:      securityGroups,
 		Subnet:              vmConfigMap[keySubnetID].(string),
-		VmType:              vmType,
-		Vpc:                 vmConfigMap[keyVPCID].(string),
+		VMType:              vmType,
+		VPC:                 vmConfigMap[keyVPCID].(string),
 	}
 
 	awsEsConfig := gqlcloudcluster.AwsEsConfigInput{
@@ -343,9 +346,9 @@ func awsCreateCloudCluster(ctx context.Context, d *schema.ResourceData, m any) d
 		ClusterName:      clusterConfigMap[keyClusterName].(string),
 		UserEmail:        clusterConfigMap[keyAdminEmail].(string),
 		AdminPassword:    secret.String(clusterConfigMap[keyAdminPassword].(string)),
-		DnsNameServers:   dnsNameServers,
-		DnsSearchDomains: dnsSearchDomains,
-		NtpServers:       ntpServers,
+		DNSNameServers:   dnsNameServers,
+		DNSSearchDomains: dnsSearchDomains,
+		NTPServers:       ntpServers,
 		NumNodes:         clusterConfigMap[keyNumNodes].(int),
 		AwsEsConfig:      awsEsConfig,
 	}
@@ -358,7 +361,7 @@ func awsCreateCloudCluster(ctx context.Context, d *schema.ResourceData, m any) d
 		Region:               d.Get(keyRegion).(string),
 		UsePlacementGroups:   d.Get(keyUsePlacementGroups).(bool),
 		Validations:          validations,
-		VmConfig:             vmConfig,
+		VMConfig:             vmConfig,
 	}
 
 	cloudcluster, err := cloudcluster.Wrap(client).CreateCloudCluster(ctx, input, false)
diff --git a/internal/provider/resource_azure_cloud_cluster.go b/internal/provider/resource_azure_cloud_cluster.go
diff --git a/templates/resources/aws_cloud_cluster.md.tmpl b/templates/resources/aws_cloud_cluster.md.tmpl
diff --git a/templates/resources/azure_cloud_cluster.md.tmpl b/templates/resources/azure_cloud_cluster.md.tmpl

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@ require (`
`9`	`9`	`github.com/hashicorp/terraform-plugin-docs v0.22.0`
`10`	`10`	`github.com/hashicorp/terraform-plugin-log v0.9.0`
`11`	`11`	`github.com/hashicorp/terraform-plugin-sdk/v2 v2.34.0`
`12`		`- github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.10-0.20251022121019-f78d91b1dbf6`
	`12`	`+ github.com/rubrikinc/rubrik-polaris-sdk-for-go v1.1.9-0.20251106131905-3185657b9893`
`13`	`13`	`)`
`14`	`14`
`15`	`15`	`require (`