86 lines
4.7 KiB
Markdown
86 lines
4.7 KiB
Markdown
# Quick pickup (last updated 2026-08-25)
|
|
|
|
Read this first. `AGENT.md` has the full history/design rationale if you need depth on
|
|
any specific decision below.
|
|
|
|
## What this project is
|
|
|
|
Two things, in one working tree:
|
|
1. `~/code/experiments/hpe/` (this dir) -- a Python reference implementation
|
|
(`extractors/`, `actions/`) for scraping/writing an HP ProCurve/OfficeConnect 1810
|
|
(J9450A) switch's web UI at `192.168.2.10`, no password.
|
|
2. `~/code/experiments/hpe/terraform-provider-hpe1810/` -- the **real deliverable**: a
|
|
Go/OpenTofu Terraform Plugin Framework provider that does the same thing properly.
|
|
Example usage lives in `~/code/experiments/hpe/terraform/`.
|
|
|
|
The Python side is essentially done and frozen as a reference; almost all active work now
|
|
is in the Go provider.
|
|
|
|
## Current state (2026-08-25)
|
|
|
|
Provider builds clean. `tofu plan` in `~/code/experiments/hpe/terraform/` shows **zero
|
|
drift** -- state matches the real switch exactly.
|
|
|
|
**13 data sources** (all read-only pages) -- done.
|
|
|
|
**10 write resources** -- all built, all verified live on real hardware:
|
|
`hpe1810_locator`, `hpe1810_green_features`, `hpe1810_port` (for_each over `var.ports`),
|
|
`hpe1810_system_description`, `hpe1810_time_zone`, `hpe1810_lldp_configuration` (Global
|
|
Mode only), `hpe1810_daylight_saving_time` (Disable/Recurring only), `hpe1810_flow_control`,
|
|
`hpe1810_port_mirroring` (global settings only), `hpe1810_trunk` (create/delete LAGs +
|
|
membership).
|
|
|
|
Plus: `save_running_config` provider flag (only saves to flash if something actually
|
|
changed this run) and `admin_port` provider flag (default **24** -- `hpe1810_port` and
|
|
`hpe1810_trunk` both hard-refuse to write to it, guard verified live).
|
|
|
|
## Still on TODO.md as wanted ("y") but not built
|
|
|
|
Loop Protection Cfg (`LoopProtectionCfg.html`), Advanced Security (`security.html`),
|
|
Secure Connection (`SSLCfg.html`), LLDP Local/Remote Device (read-only summary pages).
|
|
Check `TODO.md`'s "Want it?" column before picking a next target -- don't assume the risk
|
|
triage in `AGENT.md` is the same as what's actually wanted (learned this the hard way once
|
|
already this session).
|
|
|
|
Also explicitly deferred (not on the TODO list, just noted as future work if ever wanted):
|
|
per-port tables on `LLDPConfig.html` (Interface Mode) and `FDBConfig.html` (per-source-port
|
|
Direction) -- same complexity class as `resource_port.go`/`resource_trunk.go`.
|
|
|
|
## Things to remember before touching the switch again
|
|
|
|
- **Proxy**: always `NO_PROXY=192.168.2.10 no_proxy=192.168.2.10` before any curl/tofu
|
|
command, or requests silently go through `fproxy.tutus.se:8080` and hang/502.
|
|
- **Single session limit**: the switch allows exactly one active web session. A stray
|
|
browser tab or leftover curl cookie jar session will lock out the next login. The Go
|
|
provider logs itself out at process exit (`Client.Logout()` via `Shutdown()` in
|
|
`main.go`) so back-to-back `tofu` runs are fine now -- but manual curl testing sessions
|
|
(like `/tmp/*.txt` cookie jars used during dev) need an explicit
|
|
`curl ".../index.html?logout=1"` when you're done, or wait out the ~5 min timeout.
|
|
- **Rebuild after any Go change**: `cd terraform-provider-hpe1810 && go build -o
|
|
terraform-provider-hpe1810 .` -- `~/.tofurc` dev_overrides picks it up automatically,
|
|
no `tofu init` needed/possible.
|
|
- **Port 24 is the only real uplink right now.** Never write to it directly; the
|
|
`admin_port` guard covers `hpe1810_port`/`hpe1810_trunk`, but there's no such guard on
|
|
any other resource (nor should there need to be, since nothing else targets a specific
|
|
interface).
|
|
- This firmware has repeatedly needed **live experimentation** to find the real write
|
|
protocol -- static HTML snapshots in `page_snapshots/` are useful for structure but have
|
|
been wrong or incomplete more than once (`FILTER_MISSING` on omitted hidden fields;
|
|
`TrunkMembership.html`'s real form is JS-rendered, not in the static HTML at all; DST's
|
|
duplicate field labels). Budget time for a probe-with-curl step before writing Go for any
|
|
new write target.
|
|
|
|
## How to pick up
|
|
|
|
1. Ask the user (or check `TODO.md`) what's next.
|
|
2. If it's a new write page: fetch it live with curl (logged in via the pattern used
|
|
throughout this session -- GET `/` then POST `/hp_login.html` with empty `pwd`), check
|
|
`page_snapshots/<Page>.html.html` for structure, but verify writes live with curl before
|
|
writing any Go.
|
|
3. Follow the established resource shape: `client/<name>.go` (or a new method on
|
|
`client.Client`) for the HTTP protocol, `resource_<name>.go` for the Terraform side,
|
|
register in `provider.go`'s `Resources()`, add example usage to
|
|
`~/code/experiments/hpe/terraform/main.tf`, verify live (Create/Update/Delete round-trip
|
|
confirmed against the real switch, not just "no error"), update `TODO.md` and
|
|
`AGENT.md`.
|