How zscaler/terraform-provider-zpa works
This is a Terraform provider for managing and reading Zscaler Private Access (ZPA) configuration. The principal workflow is Terraform invoking the provider, whose resource handlers translate configuration into ZPA API operations and reconcile returned state; data sources read existing ZPA objects into Terraform. The tree shows broad application, policy, infrastructure, identity, and privileged-access capabilities. Only selected handlers were sampled, so subsystem links below represent the provider’s documented product surface; detailed registration and client wiring are not asserted.
Main entry points: provider.go Provider setup · main.go Plugin entry · data_source_zpa_private_cloud_controller.go ZPA data sources · resource_zpa_application_segment.go Application segments
Components 19
Provider runtime
- Plugin entry
main.go - Provider setup
zpa/provider.go - Client configuration
zpa/config.go - ZPA data sources
zpa/data_source_zpa_private_cloud_controller.go
Applications and policy
- Application segments
zpa/resource_zpa_application_segment.go - Application lookups
zpa/data_source_zpa_application_segment.go - Access policies
zpa/resource_zpa_policy_access_rule.go - Inspection controls
zpa/resource_zpa_inspection_profile.go - Browser isolation
zpa/resource_zpa_cloud_browser_isolation_external_profile.go
Connectors and infrastructure
- App connectors
zpa/resource_zpa_app_connector_group.go - Private cloud
zpa/resource_zpa_private_cloud.go - Service edges
zpa/resource_zpa_service_edge_group.go - Provisioning keys
zpa/resource_zpa_provisioning_key.go
Identity and portals
- Microtenants
zpa/resource_zpa_microtenant_controller.go - Identity providers
zpa/data_source_zpa_idp_controller.go - Privileged access
zpa/resource_zpa_pra_console_controller.go - User portals
zpa/resource_zpa_user_portal_controller.go
Other components
- Terraform
- ZPA API
Connections 22
- Terraform → Plugin entry: starts plugin
- Plugin entry → Provider setup: serves provider
- Provider setup → Client configuration: configures client
- Provider setup → Application segments: registers resources
- Provider setup → Access policies: registers resources
- Provider setup → App connectors: registers resources
- Provider setup → Microtenants: registers resources
- Provider setup → ZPA data sources: registers sources
- Application segments → ZPA API: manages objects
- Application lookups → ZPA API: reads objects
- Access policies → ZPA API: manages rules
- Inspection controls → ZPA API: manages controls
- Browser isolation → ZPA API: manages profiles
- App connectors → ZPA API: manages groups
- Private cloud → ZPA API: manages cloud
- Service edges → ZPA API: manages groups
- Provisioning keys → ZPA API: manages keys
- Microtenants → ZPA API: manages tenants
- Identity providers → ZPA API: reads identity
- Privileged access → ZPA API: manages consoles
- User portals → ZPA API: manages portals
- ZPA data sources → ZPA API: reads objects