[datadog_user_role] Creating a new datadog_user_role resource

datadog/fwprovider/data_source_datadog_role_users.go

@@ -0,0 +1,165 @@
+package fwprovider
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/DataDog/datadog-api-client-go/v2/api/datadogV2"
+	"github.com/hashicorp/terraform-plugin-framework/attr"
+	"github.com/hashicorp/terraform-plugin-framework/datasource"
+	"github.com/hashicorp/terraform-plugin-framework/datasource/schema"
+	"github.com/hashicorp/terraform-plugin-framework/types"
+
+	"github.com/terraform-providers/terraform-provider-datadog/datadog/internal/utils"
+)
+
+var (
+	_ datasource.DataSource = &datadogRoleUsersDataSource{}
+)
+
+type RoleUserModel struct {
+	RoleId types.String `tfsdk:"role_id"`
+	UserId types.String `tfsdk:"user_id"`
+}
+
+type datadogRoleUsersDataSourceModel struct {
+	// Query Parameters
+	RoleID     types.String `tfsdk:"role_id"`
+	Filter     types.String `tfsdk:"filter"`
+	ExactMatch types.Bool   `tfsdk:"exact_match"`
+	// Results
+	ID        types.String     `tfsdk:"id"`
+	RoleUsers []*RoleUserModel `tfsdk:"role_users"`
+}
+
+func NewDatadogRoleUsersDataSource() datasource.DataSource {
+	return &datadogRoleUsersDataSource{}
+}
+
+type datadogRoleUsersDataSource struct {
+	Api      *datadogV2.RolesApi
+	UsersApi *datadogV2.UsersApi
+	Auth     context.Context
+}
+
+func (r *datadogRoleUsersDataSource) Configure(_ context.Context, request datasource.ConfigureRequest, response *datasource.ConfigureResponse) {
+	providerData, _ := request.ProviderData.(*FrameworkProvider)
+	r.Api = providerData.DatadogApiInstances.GetRolesApiV2()
+	r.UsersApi = providerData.DatadogApiInstances.GetUsersApiV2()
+	r.Auth = providerData.Auth
+}
+
+func (d *datadogRoleUsersDataSource) Metadata(_ context.Context, req datasource.MetadataRequest, resp *datasource.MetadataResponse) {
+	resp.TypeName = "role_users"
+}
+
+func (d *datadogRoleUsersDataSource) Schema(_ context.Context, _ datasource.SchemaRequest, resp *datasource.SchemaResponse) {
+	resp.Schema = schema.Schema{
+		Description: "Use this data source to retrieve information about existing Datadog role users assignments. Note that this data source is in beta and is subject to change.",
+		Attributes: map[string]schema.Attribute{
+			// Datasource Parameters
+			"id": utils.ResourceIDAttribute(),
+			"role_id": schema.StringAttribute{
+				Description: "The role's identifier.",
+				Required:    true,
+			},
+			"filter": schema.StringAttribute{
+				Description: "Search query, can be user name.",
+				Optional:    true,
+			},
+			"exact_match": schema.BoolAttribute{
+				Description: "When true, `filter_keyword` string is exact matched against the user's `name`.",
+				Optional:    true,
+			},
+			// Computed values
+			"role_users": schema.ListAttribute{
+				Computed:    true,
+				Description: "List of users assigned to role.",
+				ElementType: types.ObjectType{
+					AttrTypes: map[string]attr.Type{
+						"role_id": types.StringType,
+						"user_id": types.StringType,
+					},
+				},
+			},
+		},
+	}
+
+}
+
+func (d *datadogRoleUsersDataSource) Read(ctx context.Context, req datasource.ReadRequest, resp *datasource.ReadResponse) {
+	var state datadogRoleUsersDataSourceModel
+	resp.Diagnostics.Append(req.Config.Get(ctx, &state)...)
+	if resp.Diagnostics.HasError() {
+		return
+	}
+
+	var optionalParams datadogV2.ListRoleUsersOptionalParameters
+	roleID := state.RoleID.ValueString()
+
+	if !state.Filter.IsNull() {
+		optionalParams.Filter = state.Filter.ValueStringPointer()
+	}
+
+	pageSize := int64(100)
+	pageNumber := int64(0)
+
+	var roleUsers []datadogV2.User
+	for {
+		optionalParams.PageNumber = &pageNumber
+		optionalParams.PageSize = &pageSize
+
+		ddResp, _, err := d.Api.ListRoleUsers(d.Auth, roleID, optionalParams)
+		if err != nil {
+			resp.Diagnostics.Append(utils.FrameworkErrorDiag(err, "error getting user roles"))
+			return
+		}
+
+		roleUsers = append(roleUsers, ddResp.GetData()...)
+		if len(ddResp.GetData()) < 100 {
+			break
+		}
+		pageNumber++
+	}
+
+	d.updateState(&state, &roleUsers)
+
+	resp.Diagnostics.Append(resp.State.Set(ctx, &state)...)
+}
+
+func (r *datadogRoleUsersDataSource) updateState(state *datadogRoleUsersDataSourceModel, users *[]datadogV2.User) {
+	roleId := state.RoleID.ValueString()
+
+	exactMatch := state.ExactMatch.ValueBool()
+	filterKeyword := state.Filter.ValueString()
+	var roleUsers []*RoleUserModel
+
+	for _, user := range *users {
+		if exactMatch {
+			if u, _, err := r.UsersApi.GetUser(r.Auth, user.GetId()); err == nil {
+				attributes := u.Data.GetAttributes()
+				if attributes.GetName() == filterKeyword {
+					userId := user.GetId()
+					roleUser := RoleUserModel{
+						RoleId: types.StringValue(roleId),
+						UserId: types.StringValue(userId),
+					}
+
+					roleUsers = append(roleUsers, &roleUser)
+				}
+			}
+		} else {
+			userId := user.GetId()
+			roleId := state.RoleID.ValueString()
+			roleUser := RoleUserModel{
+				RoleId: types.StringValue(roleId),
+				UserId: types.StringValue(userId),
+			}
+
+			roleUsers = append(roleUsers, &roleUser)
+		}
+	}
+
+	state.ID = types.StringValue(fmt.Sprintf("%s:%s", roleId, state.Filter.ValueString()))
+	state.RoleUsers = roleUsers
+}

datadog/fwprovider/framework_provider.go

@@ -59,6 +59,7 @@ var Resources = []func() resource.Resource{
 	NewTeamMembershipResource,
 	NewTeamPermissionSettingResource,
 	NewTeamResource,
+	NewUserRoleResource,
 	NewSecurityMonitoringSuppressionResource,
 	NewCSMThreatsAgentRuleResource,
 	NewServiceAccountResource,
@@ -78,6 +79,7 @@ var Datasources = []func() datasource.DataSource{
 	NewRumApplicationDataSource,
 	NewSensitiveDataScannerGroupOrderDatasource,
 	NewDatadogUsersDataSource,
+	NewDatadogRoleUsersDataSource,
 	NewSecurityMonitoringSuppressionDataSource,
 	NewCSMThreatsAgentRulesDataSource,
 }