resource_github_repository_environment_deployment_policy_test.go

package github

import (
	"fmt"
	"regexp"
	"testing"

	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/acctest"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
	"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
)

func TestAccGithubRepositoryEnvironmentDeploymentPolicyBranch(t *testing.T) {
	t.Run("creates a repository environment with branch-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment / test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	   = github_repository.test.name
				environment	   = github_repository_environment.test.environment
				branch_pattern = "releases/*"
			}

		`, repoName)

		check := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment / test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"releases/*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config: config,
					Check:  check,
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyBranchUpdate(t *testing.T) {
	t.Run("updates the pattern for a branch-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		var deploymentPolicyId string

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "main"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"main",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "release/*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr("github_repository_environment_deployment_policy.test", "repository", repoName),
			resource.TestCheckResourceAttr("github_repository_environment_deployment_policy.test", "environment", "environment/test"),
			resource.TestCheckResourceAttr("github_repository_environment_deployment_policy.test", "branch_pattern", "release/*"),
			resource.TestCheckNoResourceAttr("github_repository_environment_deployment_policy.test", "tag_pattern"),
			testSameDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyBranch_import(t *testing.T) {
	randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
	repoName := fmt.Sprintf("%senv-deploy-%s", testResourcePrefix, randomID)

	config := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "main"
			}

		`, repoName)

	resource.Test(t, resource.TestCase{
		PreCheck:          func() { skipUnauthenticated(t) },
		ProviderFactories: providerFactories,
		Steps: []resource.TestStep{
			{
				Config: config,
				Check: resource.ComposeTestCheckFunc(
					resource.TestCheckResourceAttr(
						"github_repository_environment_deployment_policy.test", "repository",
						repoName,
					),
					resource.TestCheckResourceAttr(
						"github_repository_environment_deployment_policy.test", "environment",
						"environment/test",
					),
					resource.TestCheckResourceAttr(
						"github_repository_environment_deployment_policy.test", "branch_pattern",
						"main",
					),
					resource.TestCheckNoResourceAttr(
						"github_repository_environment_deployment_policy.test", "tag_pattern",
					),
				),
			},
			{
				ResourceName:      "github_repository_environment_deployment_policy.test",
				ImportState:       true,
				ImportStateVerify: true,
			},
		},
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyTag(t *testing.T) {
	t.Run("creates a repository environment with tag-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config: config,
					Check:  check,
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyTagUpdate(t *testing.T) {
	t.Run("updates the pattern for a tag-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		var deploymentPolicyId string

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "version*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"version*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testSameDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyBranchToTagUpdate(t *testing.T) {
	t.Run("recreates deployment policy when pattern type changes from branch to tag", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		var deploymentPolicyId string

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "release/*"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"release/*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testNewDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyTagToBranchUpdate(t *testing.T) {
	t.Run("recreates deployment policy when pattern type changes from tag to branch", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		var deploymentPolicyId string

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "release/*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"release/*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
			testNewDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicyErrors(t *testing.T) {
	t.Run("errors when no patterns are set", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`
			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
			}
		`, repoName)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config:      config,
					ExpectError: regexp.MustCompile("one of `branch_pattern,tag_pattern` must be specified"),
				},
			},
		})
	})

	t.Run("errors when both patterns are set", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`
			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository     = github_repository.test.name
				environment    = github_repository_environment.test.environment
				branch_pattern = "main"
				tag_pattern    = "v*"
			}
		`, repoName)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config:      config,
					ExpectError: regexp.MustCompile("only one of `branch_pattern,tag_pattern` can be specified"),
				},
			},
		})
	})

	t.Run("errors when an empty branch pattern is set", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`
			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository     = github_repository.test.name
				environment    = github_repository_environment.test.environment
				branch_pattern = ""
			}
		`, repoName)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config:      config,
					ExpectError: regexp.MustCompile("`branch_pattern` must be a valid non-empty string"),
				},
			},
		})
	})

	t.Run("errors when an empty tag pattern is set", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`
			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository     = github_repository.test.name
				environment    = github_repository_environment.test.environment
				tag_pattern = ""
			}
		`, repoName)

		resource.Test(t, resource.TestCase{
			PreCheck:  func() { skipUnauthenticated(t) },
			Providers: testAccProviders,
			Steps: []resource.TestStep{
				{
					Config:      config,
					ExpectError: regexp.MustCompile("`tag_pattern` must be a valid non-empty string"),
				},
			},
		})
	})
}

func TestAccGithubRepositoryEnvironmentDeploymentPolicy(t *testing.T) {
	t.Run("creates a repository environment with branch-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment / test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	   = github_repository.test.name
				environment	   = github_repository_environment.test.environment
				branch_pattern = "releases/*"
			}

		`, repoName)

		check := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment / test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"releases/*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:          func() { skipUnauthenticated(t) },
			ProviderFactories: providerFactories,
			Steps: []resource.TestStep{
				{
					Config: config,
					Check:  check,
				},
			},
		})
	})

	t.Run("updates the pattern for a branch-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		var deploymentPolicyId string

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "main"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"main",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "release/*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr("github_repository_environment_deployment_policy.test", "repository", repoName),
			resource.TestCheckResourceAttr("github_repository_environment_deployment_policy.test", "environment", "environment/test"),
			resource.TestCheckResourceAttr("github_repository_environment_deployment_policy.test", "branch_pattern", "release/*"),
			resource.TestCheckNoResourceAttr("github_repository_environment_deployment_policy.test", "tag_pattern"),
			testSameDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:          func() { skipUnauthenticated(t) },
			ProviderFactories: providerFactories,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})

	t.Run("creates a repository environment with tag-based deployment policy", func(t *testing.T) {
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)
		config := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:          func() { skipUnauthenticated(t) },
			ProviderFactories: providerFactories,
			Steps: []resource.TestStep{
				{
					Config: config,
					Check:  check,
				},
			},
		})
	})

	t.Run("updates the pattern for a tag-based deployment policy", func(t *testing.T) {
		var deploymentPolicyId string
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "version*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"version*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testSameDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:          func() { skipUnauthenticated(t) },
			ProviderFactories: providerFactories,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})

	t.Run("recreates deployment policy when pattern type changes from branch to tag", func(t *testing.T) {
		var deploymentPolicyId string
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "release/*"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"release/*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testNewDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:          func() { skipUnauthenticated(t) },
			ProviderFactories: providerFactories,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})

	t.Run("recreates deployment policy when pattern type changes from tag to branch", func(t *testing.T) {
		var deploymentPolicyId string
		randomID := acctest.RandStringFromCharSet(5, acctest.CharSetAlphaNum)
		repoName := fmt.Sprintf("%srepo-env-deploy-%s", testResourcePrefix, randomID)

		config1 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				tag_pattern = "v*"
			}

		`, repoName)

		check1 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
				"v*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
			),
			testDeploymentPolicyId("github_repository_environment_deployment_policy.test", &deploymentPolicyId),
		)

		config2 := fmt.Sprintf(`

			data "github_user" "current" {
				username = ""
			}

			resource "github_repository" "test" {
				name      = "%s"
				ignore_vulnerability_alerts_during_read = true
			}

			resource "github_repository_environment" "test" {
				repository 	= github_repository.test.name
				environment	= "environment/test"
				wait_timer	= 10000
				reviewers {
					users = [data.github_user.current.id]
				}
				deployment_branch_policy {
					protected_branches     = false
					custom_branch_policies = true
				}
			}

			resource "github_repository_environment_deployment_policy" "test" {
				repository 	= github_repository.test.name
				environment	= github_repository_environment.test.environment
				branch_pattern = "release/*"
			}

		`, repoName)

		check2 := resource.ComposeTestCheckFunc(
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "repository",
				repoName,
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "environment",
				"environment/test",
			),
			resource.TestCheckResourceAttr(
				"github_repository_environment_deployment_policy.test", "branch_pattern",
				"release/*",
			),
			resource.TestCheckNoResourceAttr(
				"github_repository_environment_deployment_policy.test", "tag_pattern",
			),
			testNewDeploymentPolicyId(
				"github_repository_environment_deployment_policy.test",
				&deploymentPolicyId,
			),
		)

		resource.Test(t, resource.TestCase{
			PreCheck:          func() { skipUnauthenticated(t) },
			ProviderFactories: providerFactories,
			Steps: []resource.TestStep{
				{
					Config: config1,
					Check:  check1,
				},
				{
					Config: config2,
					Check:  check2,
				},
			},
		})
	})
}

func testDeploymentPolicyId(resourceName string, id *string) resource.TestCheckFunc {
	return func(s *terraform.State) error {
		rs, ok := s.RootModule().Resources[resourceName]
		if !ok {
			return fmt.Errorf("Not found: %s", resourceName)
		}

		if rs.Primary.ID == "" {
			return fmt.Errorf("Resource ID is not set")
		}

		*id = rs.Primary.ID

		return nil
	}
}

func testSameDeploymentPolicyId(resourceName string, id *string) resource.TestCheckFunc {
	return func(s *terraform.State) error {
		rs, ok := s.RootModule().Resources[resourceName]
		if !ok {
			return fmt.Errorf("Not found: %s", resourceName)
		}

		if rs.Primary.ID == "" {
			return fmt.Errorf("Resource ID is not set")
		}

		if rs.Primary.ID != *id {
			return fmt.Errorf("New resource does not match old resource id: %s, %s", rs.Primary.ID, *id)
		}

		return nil
	}
}

func testNewDeploymentPolicyId(resourceName string, id *string) resource.TestCheckFunc {
	return func(s *terraform.State) error {
		rs, ok := s.RootModule().Resources[resourceName]
		if !ok {
			return fmt.Errorf("Not found: %s", resourceName)
		}

		if rs.Primary.ID == "" {
			return fmt.Errorf("Resource ID is not set")
		}

		if rs.Primary.ID == *id {
			return fmt.Errorf("New resource matches old resource id: %s", rs.Primary.ID)
		}

		return nil
	}
}