Test project-qualified extension import

Author: IlyaasK

docs/acceptance.md

@@ -40,7 +40,7 @@ operation. Secrets must remain GitHub Actions secrets and must not be printed.
 | --- | --- | --- | --- |
 | `kernel_project` resource | Test present | Create, rename, no-drift plan, import, delete, and 404 verification. | None. |
 | `kernel_browser_pool` resource | Test present | Create, durable update with stable ID, no-drift plan, bare and project-qualified import paths, explicit project scope, non-force delete, and 404 verification. | Keep leased-browser conflict behavior in unit tests; acceptance must not create runtime leases. |
-| `kernel_extension` resource | Test present | Upload, checksum state, no-drift plan, metadata-only import, content replacement with new ID, old-ID disappearance, delete, and 404 verification. | Add project-qualified import to live coverage before the v1 tag. |
+| `kernel_extension` resource | Test present | Upload, checksum state, no-drift plan, bare and project-qualified metadata-only import paths, content replacement with new ID, old-ID disappearance, delete, and 404 verification. | None. |
 | `kernel_browser_pool` data source | Test present | A uniquely created pool is read by canonical ID and byte-exact name, including normalized durable configuration, a no-drift plan, and post-destroy coded `not_found` verification. | None. |
 | `kernel_project` data source | Test present | A uniquely created project is read by canonical ID and exact name; the provider default resolves the configured project; metadata, no-drift planning, and post-destroy coded `not_found` are verified. | None. |
 | `kernel_extension` data source | Test present | A uniquely uploaded extension is read by canonical ID and exact name through explicit and provider-default project scope; metadata, no-drift planning, and post-destroy coded `not_found` are verified. | None. |

internal/resources/extension/resource_acc_test.go

@@ -74,6 +74,54 @@ func TestAccExtensionLifecycle(t *testing.T) {
 	})
 }
 
+func TestAccExtensionProjectScopedImport(t *testing.T) {
+	projectID := os.Getenv(acctest.EnvAltProjectID)
+	if projectID == "" {
+		projectID = os.Getenv(acctest.EnvProjectID)
+	}
+	if projectID == "" {
+		t.Skipf("%s or %s must be set for the project-scoped extension test", acctest.EnvAltProjectID, acctest.EnvProjectID)
+	}
+
+	name := acctest.UniqueName(t, "extension-scoped")
+	sourcePath, checksum := acctest.ExtensionArchive(t, "project-scoped")
+	config := testAccExtensionProjectConfig(name, sourcePath, projectID)
+	var extensionID string
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:                 func() { acctest.PreCheck(t) },
+		ProtoV6ProviderFactories: acctest.ProtoV6ProviderFactories(),
+		CheckDestroy:             testAccCheckExtensionDestroyed(),
+		Steps: []resource.TestStep{
+			{
+				Config: config,
+				Check: resource.ComposeAggregateTestCheckFunc(
+					testAccCaptureExtensionID(t, extensionResourceName, &extensionID),
+					resource.TestCheckResourceAttr(extensionResourceName, "project_id", projectID),
+					resource.TestCheckResourceAttr(extensionResourceName, "source_sha256", checksum),
+				),
+			},
+			{
+				ResourceName:       extensionResourceName,
+				ImportState:        true,
+				ImportStateVerify:  true,
+				ImportStatePersist: true,
+				ImportStateIdFunc: func(state *terraform.State) (string, error) {
+					id, stateProjectID, err := extensionStateValues(state, extensionResourceName)
+					if err != nil {
+						return "", err
+					}
+					return stateProjectID + "/" + id, nil
+				},
+			},
+			{
+				Config:   config,
+				PlanOnly: true,
+			},
+		},
+	})
+}
+
 func testAccExtensionConfig(name, sourcePath string) string {
 	return acctest.ProviderConfig() + fmt.Sprintf(`
 resource "kernel_extension" "test" {
@@ -84,6 +132,17 @@ resource "kernel_extension" "test" {
 `, name, sourcePath, sourcePath)
 }
 
+func testAccExtensionProjectConfig(name, sourcePath, projectID string) string {
+	return acctest.ProviderConfig() + fmt.Sprintf(`
+resource "kernel_extension" "test" {
+  name          = %[1]q
+  source_path   = %[2]q
+  source_sha256 = filesha256(%[2]q)
+  project_id    = %[3]q
+}
+`, name, sourcePath, projectID)
+}
+
 func testAccCaptureExtensionID(t *testing.T, resourceName string, extensionID *string) resource.TestCheckFunc {
 	t.Helper()