feat(specs): Add new security and device profile specs

assets/pango/errors/panos.go

@@ -58,8 +58,12 @@ func Parse(body []byte) error {
 
 	_ = xml.Unmarshal(body, &e)
 	if e.Failed() {
+		msg := e.Message()
+		if msg == "" {
+			msg = fmt.Sprintf("(raw response: %s)", strings.TrimSpace(string(body)))
+		}
 		return Panos{
-			Msg:  e.Message(),
+			Msg:  msg,
 			Code: e.Code,
 		}
 	}

assets/terraform/examples/resources/panos_administrator/resource.tf

@@ -0,0 +1,13 @@
+resource "panos_administrator" "example" {
+	location = {
+		panorama = {}
+	}
+	name                   = "admin-user"
+	authentication_profile = "my-auth-profile"
+
+	permissions = {
+		role_based = {
+			superuser = true
+		}
+	}
+}

assets/terraform/examples/resources/panos_decryption_profile/resource.tf

@@ -0,0 +1,26 @@
+resource "panos_decryption_profile" "example" {
+	location = {
+		shared = {}
+	}
+	name = "my-decryption-profile"
+
+	ssl_forward_proxy = {
+		block_expired_certificate  = true
+		block_untrusted_issuer     = true
+		block_unknown_cert         = true
+		block_unsupported_version  = true
+		block_unsupported_cipher   = true
+		restrict_cert_exts         = true
+	}
+
+	ssl_protocol_settings = {
+		min_version        = "tls1-2"
+		max_version        = "max"
+		keyxchg_algo_rsa   = true
+		keyxchg_algo_ecdhe = true
+		enc_algo_aes_128_gcm = true
+		enc_algo_aes_256_gcm = true
+		auth_algo_sha256   = true
+		auth_algo_sha384   = true
+	}
+}

assets/terraform/examples/resources/panos_email_server_profile/resource.tf

@@ -1,50 +1,18 @@
-resource "panos_template" "example" {
-  location = { panorama = {} }
-  name     = "example-template"
-}
-
-# Email server profile forwarding security logs to a corporate SMTP relay
-# with authenticated SMTP and custom log format strings.
 resource "panos_email_server_profile" "example" {
-  location = {
-    template = {
-      name = panos_template.example.name
-    }
-  }
-
-  name = "security-alerts-email"
-
-  servers = [
-    {
-      name         = "corporate-smtp"
-      display_name = "Corporate SMTP Relay"
-      from         = "panos-alerts@corp.example.com"
-      to           = "security-team@corp.example.com"
-      and_also_to  = "noc@corp.example.com"
-      gateway      = "smtp.corp.example.com"
-      protocol     = "SMTP"
-      port         = 587
-
-      # Use Login authentication with SMTP credentials
-      authentication_type = "Login"
-      username            = "panos-svc"
-      password            = "Str0ngP@ssw0rd!"
-    }
-  ]
-
-  # Custom format strings for log types relevant to security operations.
-  # These override the default PAN-OS email log format.
-  format = {
-    traffic = "$receive_time,$serial,$type,$subtype,$src,$dst,$proto,$action"
-    threat  = "$receive_time,$serial,$type,$subtype,$src,$dst,$threat_name,$severity"
-    system  = "$receive_time,$serial,$type,$subtype,$severity,$opaque"
-    url     = "$receive_time,$serial,$type,$subtype,$src,$dst,$url"
-    wildfire = "$receive_time,$serial,$type,$subtype,$src,$dst,$threat_name,$filetype"
+	location = {
+		vsys = {
+			name = "vsys1"
+		}
+	}
+	name = "my-email-server-profile"
 
-    # Escape backslashes and double-quotes in log field values
-    escaping = {
-      escape_character   = "\\"
-      escaped_characters = "\""
-    }
-  }
+	servers = [
+		{
+			name    = "email-server-1"
+			from    = "panos@example.com"
+			to      = "alerts@example.com"
+			gateway = "smtp.example.com"
+			port    = 25
+		}
+	]
 }

assets/terraform/examples/resources/panos_snmptrap_profile/resource.tf

@@ -0,0 +1,20 @@
+resource "panos_snmptrap_profile" "example" {
+	location = {
+		vsys = {
+			name = "vsys1"
+		}
+	}
+	name = "my-snmp-trap-profile"
+
+	version = {
+		v2c = {
+			servers = [
+				{
+					name      = "snmp-server-1"
+					manager   = "192.0.2.1"
+					community = "public"
+				}
+			]
+		}
+	}
+}

assets/terraform/internal/provider/administrator_custom.go

@@ -0,0 +1,11 @@
+package provider
+
+import (
+	"context"
+
+	"github.com/PaloAltoNetworks/pango/util"
+)
+
+func administratorCreatePasswordHash(ctx context.Context, client util.PangoClient, password string) (string, error) {
+	return client.RequestPasswordHash(ctx, password)
+}