fix(dbaas): remove MaxItems: 1 from Valkey access control arrays (#774)

Author: kangasta

CHANGELOG.md

@@ -9,6 +9,10 @@ See updating [Changelog example here](https://keepachangelog.com/en/1.0.0/)
 
 - Go version bump to 1.24
 
+### Fixed
+
+- upcloud_managed_database_user: allow adding multiple categories, channels, commands, and keys in `valkey_access_control`.
+
 ## [5.22.0] - 2025-05-12
 
 ### Added

internal/service/database/user.go

@@ -163,7 +163,6 @@ func schemaValkeyUserAccessControl() map[string]*schema.Schema {
 			Description: "Set access control to all commands in specified categories.",
 			Type:        schema.TypeList,
 			Optional:    true,
-			MaxItems:    1,
 			Elem: &schema.Schema{
 				Type: schema.TypeString,
 			},
@@ -172,7 +171,6 @@ func schemaValkeyUserAccessControl() map[string]*schema.Schema {
 			Description: "Set access control to Pub/Sub channels.",
 			Type:        schema.TypeList,
 			Optional:    true,
-			MaxItems:    1,
 			Elem: &schema.Schema{
 				Type: schema.TypeString,
 			},
@@ -181,7 +179,6 @@ func schemaValkeyUserAccessControl() map[string]*schema.Schema {
 			Description: "Set access control to commands.",
 			Type:        schema.TypeList,
 			Optional:    true,
-			MaxItems:    1,
 			Elem: &schema.Schema{
 				Type: schema.TypeString,
 			},
@@ -190,7 +187,6 @@ func schemaValkeyUserAccessControl() map[string]*schema.Schema {
 			Description: "Set access control to keys.",
 			Type:        schema.TypeList,
 			Optional:    true,
-			MaxItems:    1,
 			Elem: &schema.Schema{
 				Type: schema.TypeString,
 			},

upcloud/resource_upcloud_managed_database_test.go

@@ -84,9 +84,9 @@ func TestAccUpcloudManagedDatabase(t *testing.T) {
 
 					resource.TestCheckResourceAttr(userName2, "pg_access_control.0.allow_replication", "false"),
 
-					resource.TestCheckResourceAttr(userName5, "valkey_access_control.0.categories.0", "+@set"),
+					resource.TestCheckResourceAttr(userName5, "valkey_access_control.0.categories.0", "+@all"),
 					resource.TestCheckResourceAttr(userName5, "valkey_access_control.0.channels.0", "*"),
-					resource.TestCheckResourceAttr(userName5, "valkey_access_control.0.commands.0", "+set"),
+					resource.TestCheckResourceAttr(userName5, "valkey_access_control.0.commands.#", "3"),
 					resource.TestCheckResourceAttr(userName5, "valkey_access_control.0.keys.0", "key_*"),
 
 					resource.TestCheckResourceAttr(userName4, "opensearch_access_control.0.rules.0.index", ".opensearch-observability"),

upcloud/testdata/upcloud_managed_database/managed_database_s1.tf

@@ -175,9 +175,9 @@ resource "upcloud_managed_database_user" "db_user_5" {
   username = "somename"
   password = "Superpass123"
   valkey_access_control {
-    categories = ["+@set"]
+    categories = ["+@all"]
     channels   = ["*"]
-    commands   = ["+set"]
+    commands   = ["+set", "+get", "+del"]
     keys       = ["key_*"]
   }
 }