feat(cloud): export stack atProvider as connection secret

Add AdditionalConnectionDetailsFn to the grafana_cloud_stack resource
configurator. All scalar atProvider fields (URLs, names, statuses, IDs)
are exported as individual keys in the connection secret using their
Terraform attribute names.

Author: Duologic

config/grafana/cloud.go

@@ -8,6 +8,7 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
+	"strconv"
 
 	ujconfig "github.com/crossplane/upjet/v2/pkg/config"
 	"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
@@ -77,6 +78,100 @@ func configureCloud(p *ujconfig.Provider) {
 			GetIDFn:                ujconfig.ExternalNameAsID,
 			DisableNameInitializer: true,
 		}
+		r.Sensitive.AdditionalConnectionDetailsFn = func(attr map[string]interface{}) (map[string][]byte, error) {
+			conn := map[string][]byte{}
+			for _, key := range []string{
+				"alertmanager_ip_allow_list_cname",
+				"alertmanager_name",
+				"alertmanager_status",
+				"alertmanager_url",
+				"cluster_name",
+				"cluster_slug",
+				"description",
+				"fleet_management_name",
+				"fleet_management_private_connectivity_info_private_dns",
+				"fleet_management_private_connectivity_info_service_name",
+				"fleet_management_status",
+				"fleet_management_url",
+				"grafanas_ip_allow_list_cname",
+				"graphite_ip_allow_list_cname",
+				"graphite_name",
+				"graphite_private_connectivity_info_private_dns",
+				"graphite_private_connectivity_info_service_name",
+				"graphite_status",
+				"graphite_url",
+				"influx_url",
+				"logs_ip_allow_list_cname",
+				"logs_name",
+				"logs_private_connectivity_info_private_dns",
+				"logs_private_connectivity_info_service_name",
+				"logs_status",
+				"logs_url",
+				"name",
+				"oncall_api_url",
+				"org_name",
+				"org_slug",
+				"otlp_private_connectivity_info_private_dns",
+				"otlp_private_connectivity_info_service_name",
+				"otlp_url",
+				"pdc_api_private_connectivity_info_private_dns",
+				"pdc_api_private_connectivity_info_service_name",
+				"pdc_gateway_private_connectivity_info_private_dns",
+				"pdc_gateway_private_connectivity_info_service_name",
+				"profiles_ip_allow_list_cname",
+				"profiles_name",
+				"profiles_private_connectivity_info_private_dns",
+				"profiles_private_connectivity_info_service_name",
+				"profiles_status",
+				"profiles_url",
+				"prometheus_ip_allow_list_cname",
+				"prometheus_name",
+				"prometheus_private_connectivity_info_private_dns",
+				"prometheus_private_connectivity_info_service_name",
+				"prometheus_remote_endpoint",
+				"prometheus_remote_write_endpoint",
+				"prometheus_status",
+				"prometheus_url",
+				"region_slug",
+				"slug",
+				"status",
+				"traces_ip_allow_list_cname",
+				"traces_name",
+				"traces_private_connectivity_info_private_dns",
+				"traces_private_connectivity_info_service_name",
+				"traces_status",
+				"traces_url",
+				"url",
+				"wait_for_readiness_timeout",
+			} {
+				if v, ok := attr[key].(string); ok && v != "" {
+					conn[key] = []byte(v)
+				}
+			}
+			for _, key := range []string{
+				"alertmanager_user_id",
+				"fleet_management_user_id",
+				"graphite_user_id",
+				"logs_user_id",
+				"org_id",
+				"profiles_user_id",
+				"prometheus_user_id",
+				"traces_user_id",
+			} {
+				switch v := attr[key].(type) {
+				case float64:
+					conn[key] = []byte(strconv.FormatFloat(v, 'f', -1, 64))
+				case int:
+					conn[key] = []byte(strconv.Itoa(v))
+				}
+			}
+			// Export the stack ID (TF uses "id" but ProviderConfig expects "stack_id")
+			if v, ok := attr["id"].(string); ok && v != "" {
+				conn["id"] = []byte(v)
+			}
+			return conn, nil
+		}
+
 		r.TerraformCustomDiff = func(diff *terraform.InstanceDiff, state *terraform.InstanceState, config *terraform.ResourceConfig) (*terraform.InstanceDiff, error) {
 			// skip diff customization on create
 			if state == nil || state.Empty() {