feat(k8s): add support for security_group_id in pool resource (#3196)

Author: Mia-Cross

docs/resources/k8s_pool.md

@@ -96,6 +96,10 @@ The following arguments are supported:
 
 ~> **Important:** Updates to this field will recreate a new resource.
 
+- `security_group_id` - The ID of the security group
+
+~> **Important:** Updates to this field will recreate a new resource.
+
 ## Attributes Reference
 
 In addition to all arguments above, the following attributes are exported:

internal/services/k8s/pool.go

@@ -249,6 +249,13 @@ func ResourcePool() *schema.Resource {
 				Computed:    true,
 				Description: "The status of the pool",
 			},
+			"security_group_id": {
+				Type:        schema.TypeString,
+				Computed:    true,
+				Optional:    true,
+				ForceNew:    true,
+				Description: "The ID of the security group",
+			},
 		},
 	}
 }
@@ -324,6 +331,10 @@ func ResourceK8SPoolCreate(ctx context.Context, d *schema.ResourceData, m any) d
 		req.RootVolumeSize = &volumeSizeInBytes
 	}
 
+	if securityGroupID, ok := d.GetOk("security_group_id"); ok {
+		req.SecurityGroupID = types.ExpandStringPtr(locality.ExpandID(securityGroupID.(string)))
+	}
+
 	// check if the cluster is waiting for a pool
 	cluster, err := k8sAPI.GetCluster(&k8s.GetClusterRequest{
 		ClusterID: locality.ExpandID(d.Get("cluster_id")),
@@ -422,6 +433,7 @@ func ResourceK8SPoolRead(ctx context.Context, d *schema.ResourceData, m any) dia
 	_ = d.Set("zone", pool.Zone)
 	_ = d.Set("upgrade_policy", poolUpgradePolicyFlatten(pool))
 	_ = d.Set("public_ip_disabled", pool.PublicIPDisabled)
+	_ = d.Set("security_group_id", pool.SecurityGroupID)
 
 	if pool.PlacementGroupID != nil {
 		_ = d.Set("placement_group_id", zonal.NewID(pool.Zone, *pool.PlacementGroupID).String())

internal/services/k8s/pool_test.go

@@ -52,6 +52,7 @@ func TestAccPool_Basic(t *testing.T) {
 					testAccCheckK8SPoolServersAreInPrivateNetwork(tt, "scaleway_k8s_cluster.minimal", "scaleway_k8s_pool.default", "scaleway_vpc_private_network.minimal"),
 					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "nodes.0.private_ips.0.id"),
 					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "nodes.0.private_ips.0.address"),
+					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "security_group_id"),
 				),
 			},
 			{
@@ -65,6 +66,7 @@ func TestAccPool_Basic(t *testing.T) {
 					resource.TestCheckResourceAttr("scaleway_k8s_pool.minimal", "autoscaling", "true"),
 					resource.TestCheckResourceAttr("scaleway_k8s_pool.minimal", "version", latestK8SVersion),
 					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.minimal", "id"),
+					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.minimal", "security_group_id"),
 					resource.TestCheckResourceAttr("scaleway_k8s_pool.minimal", "tags.0", "terraform-test"),
 					resource.TestCheckResourceAttr("scaleway_k8s_pool.minimal", "tags.1", "scaleway_k8s_cluster"),
 					resource.TestCheckResourceAttr("scaleway_k8s_pool.minimal", "tags.2", "minimal"),
@@ -75,6 +77,7 @@ func TestAccPool_Basic(t *testing.T) {
 					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "nodes.0.private_ips.0.address"),
 					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "nodes.0.private_ips.1.id"),
 					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "nodes.0.private_ips.1.address"),
+					resource.TestCheckResourceAttrSet("scaleway_k8s_pool.default", "security_group_id"),
 				),
 			},
 			{