feat(rbac): support RBAC resource restriction on rolebinding

[mattisonchao]

Motivation

Support RBAC resource restriction on rolebinding

Examples

resource "streamnative_rolebinding" "rb_resource_name_restriction" {
  name         = "rb_resource_name_restriction"
  organization = "o-y8z75"
  cluster_role_name = "topic-producer"
  service_account_names = ["sv-1"]
  resource_name_restriction {
    common_instance = "instance-1"
    common_cluster = "cluster-1"
    common_tenant = "tenant-1"
    common_namespace = "ns-1"
    common_topic = "allPartition('topic-1')"
    pulsar_topic_domain = "persistent"
  }
}

data "streamnative_rolebinding" "rb_resource_name_restriction" {
  depends_on = [streamnative_rolebinding.rb_resource_name_restriction]
  name         = "rb_resource_name_restriction"
  organization = "o-y8z75"
}

[Copilot]

Pull Request Overview

This PR adds support for RBAC resource restriction on rolebinding resources in the Terraform provider. It introduces a new resource_name_restriction field while deprecating the existing condition_resource_names approach.

Key changes:

• Adds new resource_name_restriction block with structured fields for resource scoping
• Deprecates the existing condition_resource_names field in favor of the new approach
• Implements parsing logic to convert between Terraform schema and API structures

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
examples/rolebinding/main.tf	Updates example to demonstrate new resource_name_restriction usage
cloud/resource_rolebinding.go	Adds resource_name_restriction field and deprecates condition_resource_names
cloud/rbac/rbac.go	Implements parsing and schema generation for resource name restrictions
cloud/rbac/rbac_test.go	Adds comprehensive tests for the new RBAC parsing functionality
cloud/data_source_rolebinding.go	Updates data source to read resource_name_restriction field

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}