chore: support configure allow_just_in_time_access for project (#174)

ecmadao · web-flow · commit 6f881de3b376 · 2026-03-11T03:02:02.000-07:00
* chore: upgrade bytebase

* chore: update

* fix: lint

* chore: support allow_just_in_time_access
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-3.16.0
+3.16.1
diff --git a/examples/approval/main.tf b/examples/approval/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "terraform.local/bytebase/bytebase"
     }
diff --git a/examples/database/main.tf b/examples/database/main.tf
@@ -2,7 +2,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/database_group/main.tf b/examples/database_group/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/environments/main.tf b/examples/environments/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/groups/main.tf b/examples/groups/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/iamPolicy/main.tf b/examples/iamPolicy/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/instances/main.tf b/examples/instances/main.tf
@@ -2,7 +2,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/policies/main.tf b/examples/policies/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/projects/main.tf b/examples/projects/main.tf
@@ -2,7 +2,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/roles/main.tf b/examples/roles/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/settings/main.tf b/examples/settings/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/setup/main.tf b/examples/setup/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/setup/project.tf b/examples/setup/project.tf
@@ -11,6 +11,7 @@ resource "bytebase_project" "sample_project" {
   require_issue_approval      = true
   require_plan_check_no_error = true
   allow_request_role          = true
+  allow_just_in_time_access   = true
   force_issue_labels          = false
 
   # Issue labels for categorizing issues
diff --git a/examples/sql_review/main.tf b/examples/sql_review/main.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/examples/users/main.tf b/examples/users/main.tf
@@ -2,7 +2,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }
diff --git a/migration/3.16.1.md b/migration/3.16.1.md
@@ -1,4 +1,4 @@
-# Migrate from 3.15.2 to 3.16.0
+# Migrate from 3.15.2 to 3.16.1
 
 ## Breaking changes
 
@@ -102,6 +102,18 @@ resource "bytebase_service_account" "project_sa" {
 
 ## Features
 
+### Add `allow_just_in_time_access` to project
+
+The `bytebase_project` resource now supports the `allow_just_in_time_access` field to control whether just-in-time access is allowed in the project.
+
+```terraform
+resource "bytebase_project" "sample" {
+  resource_id             = "sample"
+  title                   = "Sample Project"
+  allow_just_in_time_access = true
+}
+```
+
 ### Add `REQUEST_ACCESS` approval source
 
 The `workspace_approval` setting now supports a new `REQUEST_ACCESS` source for approval rules.
diff --git a/provider/data_source_project.go b/provider/data_source_project.go
@@ -82,6 +82,11 @@ func dataSourceProject() *schema.Resource {
 				Computed:    true,
 				Description: "Whether to allow requesting roles in this project.",
 			},
+			"allow_just_in_time_access": {
+				Type:        schema.TypeBool,
+				Computed:    true,
+				Description: "Whether to allow just-in-time access in this project.",
+			},
 			"issue_labels": {
 				Type:        schema.TypeList,
 				Computed:    true,
@@ -305,6 +310,9 @@ func setProject(
 	if err := d.Set("allow_request_role", project.AllowRequestRole); err != nil {
 		return diag.Errorf("cannot set allow_request_role for project: %s", err.Error())
 	}
+	if err := d.Set("allow_just_in_time_access", project.AllowJustInTimeAccess); err != nil {
+		return diag.Errorf("cannot set allow_just_in_time_access for project: %s", err.Error())
+	}
 	if err := d.Set("issue_labels", flattenIssueLabels(project.IssueLabels)); err != nil {
 		return diag.Errorf("cannot set issue_labels for project: %s", err.Error())
 	}
diff --git a/provider/data_source_project_list.go b/provider/data_source_project_list.go
@@ -105,6 +105,11 @@ func dataSourceProjectList() *schema.Resource {
 							Computed:    true,
 							Description: "Whether to allow requesting roles in this project.",
 						},
+						"allow_just_in_time_access": {
+							Type:        schema.TypeBool,
+							Computed:    true,
+							Description: "Whether to allow just-in-time access in this project.",
+						},
 						"issue_labels": {
 							Type:        schema.TypeList,
 							Computed:    true,
@@ -183,6 +188,7 @@ func dataSourceProjectListRead(ctx context.Context, d *schema.ResourceData, m in
 		proj["require_issue_approval"] = project.RequireIssueApproval
 		proj["require_plan_check_no_error"] = project.RequirePlanCheckNoError
 		proj["allow_request_role"] = project.AllowRequestRole
+		proj["allow_just_in_time_access"] = project.AllowJustInTimeAccess
 		proj["issue_labels"] = flattenIssueLabels(project.IssueLabels)
 		proj["labels"] = project.Labels
 
diff --git a/provider/resource_project.go b/provider/resource_project.go
@@ -120,6 +120,12 @@ func resourceProjct() *schema.Resource {
 				Computed:    true,
 				Description: "Whether to allow requesting roles in this project.",
 			},
+			"allow_just_in_time_access": {
+				Type:        schema.TypeBool,
+				Optional:    true,
+				Computed:    true,
+				Description: "Whether to allow just-in-time access in this project.",
+			},
 			"issue_labels": {
 				Type:        schema.TypeList,
 				Optional:    true,
@@ -183,6 +189,7 @@ func resourceProjectCreate(ctx context.Context, d *schema.ResourceData, m interf
 		RequireIssueApproval:       d.Get("require_issue_approval").(bool),
 		RequirePlanCheckNoError:    d.Get("require_plan_check_no_error").(bool),
 		AllowRequestRole:           d.Get("allow_request_role").(bool),
+		AllowJustInTimeAccess:      d.Get("allow_just_in_time_access").(bool),
 		IssueLabels:                convertToV1IssueLabels(d.Get("issue_labels").([]interface{})),
 		Labels:                     convertToStringMap(d.Get("labels").(map[string]interface{})),
 	}
@@ -230,6 +237,9 @@ func resourceProjectCreate(ctx context.Context, d *schema.ResourceData, m interf
 	if config := rawConfig.GetAttr("allow_request_role"); !config.IsNull() {
 		updateMasks = append(updateMasks, "allow_request_role")
 	}
+	if config := rawConfig.GetAttr("allow_just_in_time_access"); !config.IsNull() {
+		updateMasks = append(updateMasks, "allow_just_in_time_access")
+	}
 	if config := rawConfig.GetAttr("issue_labels"); !config.IsNull() {
 		updateMasks = append(updateMasks, "issue_labels")
 	}
@@ -379,6 +389,9 @@ func resourceProjectUpdate(ctx context.Context, d *schema.ResourceData, m interf
 	if d.HasChange("allow_request_role") {
 		paths = append(paths, "allow_request_role")
 	}
+	if d.HasChange("allow_just_in_time_access") {
+		paths = append(paths, "allow_just_in_time_access")
+	}
 	if d.HasChange("issue_labels") {
 		paths = append(paths, "issue_labels")
 	}
@@ -405,6 +418,7 @@ func resourceProjectUpdate(ctx context.Context, d *schema.ResourceData, m interf
 			RequireIssueApproval:       d.Get("require_issue_approval").(bool),
 			RequirePlanCheckNoError:    d.Get("require_plan_check_no_error").(bool),
 			AllowRequestRole:           d.Get("allow_request_role").(bool),
+			AllowJustInTimeAccess:      d.Get("allow_just_in_time_access").(bool),
 			IssueLabels:                convertToV1IssueLabels(d.Get("issue_labels").([]interface{})),
 			Labels:                     convertToStringMap(d.Get("labels").(map[string]interface{})),
 		}, paths); err != nil {
diff --git a/tutorials/0-provider.tf b/tutorials/0-provider.tf
@@ -1,7 +1,7 @@
 terraform {
   required_providers {
     bytebase = {
-      version = "3.16.0"
+      version = "3.16.1"
       # For local development, please use "terraform.local/bytebase/bytebase" instead
       source = "registry.terraform.io/bytebase/bytebase"
     }

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`terraform {`
`2`	`2`	`required_providers {`
`3`	`3`	`bytebase = {`
`4`		`- version = "3.16.0"`
	`4`	`+ version = "3.16.1"`
`5`	`5`	`# For local development, please use "terraform.local/bytebase/bytebase" instead`
`6`	`6`	`source = "terraform.local/bytebase/bytebase"`
`7`	`7`	`}`
Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`	`terraform {`
`3`	`3`	`required_providers {`
`4`	`4`	`bytebase = {`
`5`		`- version = "3.16.0"`
	`5`	`+ version = "3.16.1"`
`6`	`6`	`# For local development, please use "terraform.local/bytebase/bytebase" instead`
`7`	`7`	`source = "registry.terraform.io/bytebase/bytebase"`
`8`	`8`	`}`