add access scope flag to instance create command

Author: rubenhoenle

docs/stackit_postgresflex_instance_create.md

@@ -23,6 +23,7 @@ stackit postgresflex instance create [flags]
 ### Options
 
 ```
+      --access-scope string                 The access scope of the instance. It defines if the instance is public or airgapped. (one of: [PUBLIC, SNA])
       --acl strings                         The access control list (ACL). Must contain at least one valid subnet, for instance '0.0.0.0/0' for open access (discouraged), '1.2.3.0/24 for a public IP range of an organization, '1.2.3.4/32' for a single IP range, etc. (default [])
       --backup-schedule string              Backup schedule. This flag will be required after 2027-01-31.
       --encryption-kek-key-id string        The key identifier

internal/cmd/postgresflex/instance/create/create.go

@@ -55,13 +55,23 @@ var (
 		"Instance type,",
 		flags.StringEnumDefaultValue(defaultType),
 	)
+
+	accessScopeFlag = flags.StringEnumFlag(
+		"access-scope",
+		[]string{
+			string(postgresflex.INSTANCENETWORKACCESSSCOPE_PUBLIC),
+			string(postgresflex.INSTANCENETWORKACCESSSCOPE_SNA),
+		},
+		"The access scope of the instance. It defines if the instance is public or airgapped.",
+	)
 )
 
 type inputModel struct {
 	*globalflags.GlobalFlagModel
 
 	InstanceName   string
 	ACL            []string
+	AccessScope    *string
 	BackupSchedule *string
 	FlavorId       *string
 	StorageClass   *string
@@ -203,6 +213,7 @@ func configureFlags(cmd *cobra.Command) {
 	cmd.Flags().String(encryptionKekKeyringIdFlag, "", "The keyring identifier")
 	cmd.Flags().String(encryptionKekKeyVersionFlag, "", "The key version")
 	cmd.Flags().String(encryptionServiceAccountFlag, "", "The service account")
+	accessScopeFlag.Register(cmd.Flags())
 
 	// remove after 2027-01-31
 	cmd.Flags().Int64(cpuFlag, 0, "Number of CPUs.")
@@ -266,6 +277,7 @@ func parseInput(p *print.Printer, cmd *cobra.Command, _ []string) (*inputModel,
 		GlobalFlagModel: globalFlags,
 		InstanceName:    flags.FlagToStringValue(p, cmd, instanceNameFlag),
 		ACL:             flags.FlagToStringSliceValue(p, cmd, aclFlag),
+		AccessScope:     accessScopeFlag.Ptr(),
 		BackupSchedule:  flags.FlagToStringPointer(p, cmd, backupScheduleFlag),
 		FlavorId:        flavorId,
 		StorageClass:    flags.FlagToStringPointer(p, cmd, storageClassFlag),
@@ -326,6 +338,11 @@ func buildRequest(ctx context.Context, model *inputModel, apiClient postgresflex
 		}
 	}
 
+	var accessScope *postgresflex.InstanceNetworkAccessScope
+	if model.AccessScope != nil {
+		accessScope = new(postgresflex.InstanceNetworkAccessScope(*model.AccessScope))
+	}
+
 	// remove after 2027-01-31
 	if model.BackupSchedule == nil {
 		return postgresflex.ApiCreateInstanceRequest{}, fmt.Errorf("backup schedule is nil")
@@ -341,7 +358,8 @@ func buildRequest(ctx context.Context, model *inputModel, apiClient postgresflex
 		FlavorId:       utils.PtrString(model.FlavorId),
 		Name:           model.InstanceName,
 		Network: postgresflex.InstanceNetworkCreate{
-			Acl: model.ACL,
+			Acl:         model.ACL,
+			AccessScope: accessScope,
 		},
 		RetentionDays: *postgresflex.NewNullableInt32(model.RetentionDays),
 		Storage: postgresflex.StorageCreate{

internal/cmd/postgresflex/instance/create/create_test.go

@@ -221,6 +221,18 @@ func TestParseInput(t *testing.T) {
 			aclValues: []string{},
 			isValid:   false,
 		},
+		{
+			description: "access scope set",
+			flagValues: fixtureFlagValues(func(flagValues map[string]string) {
+				flagValues["access-scope"] = string(postgresflex.INSTANCENETWORKACCESSSCOPE_SNA)
+			}),
+			isValid: true,
+			expectedModel: fixtureInputModel(
+				func(model *inputModel) {
+					model.AccessScope = new(string(postgresflex.INSTANCENETWORKACCESSSCOPE_SNA))
+				},
+			),
+		},
 	}
 
 	for _, tt := range tests {
@@ -245,6 +257,20 @@ func TestBuildRequest(t *testing.T) {
 			isValid:         true,
 			expectedRequest: fixtureRequest(),
 		},
+		{
+			description: "access scope set",
+			model: fixtureInputModel(func(model *inputModel) {
+				model.AccessScope = new(string(postgresflex.INSTANCENETWORKACCESSSCOPE_SNA))
+			}),
+			isValid: true,
+			expectedRequest: fixtureRequest(func(request *postgresflex.ApiCreateInstanceRequest) {
+				payload := fixturePayload(func(payload *postgresflex.CreateInstancePayload) {
+					payload.Network.AccessScope = new(postgresflex.INSTANCENETWORKACCESSSCOPE_SNA)
+				})
+
+				*request = request.CreateInstancePayload(payload)
+			}),
+		},
 	}
 
 	for _, tt := range tests {