sotoon_iam_role_user_binding (Resource)

Appliance relation between role and user. Existance of an instance from this resource will applies an specified role to the selected user.

Example Usage

data "sotoon_workspace" "mycompany" {
  id = "ee6f89b5-e07c-42f1-9462-05cec9cd92d8" # Workspace ID
}

data "sotoon_iam_user" "john" {
  workspace_id = data.sotoon_workspace.mycompany.id
  email        = "john.doe@sotoon.ir"
}

data "sotoon_iam_role" "compute_viewer" {
  name = "compute-viewer"
}

resource "sotoon_iam_role_user_binding" "john_is_compute_viewer" {
  user_id      = data.sotoon_iam_user.john.id
  workspace_id = data.sotoon_workspace.mycompany.id
  role_id      = data.sotoon_iam_role.compute_viewer.id
  items = {
    "zone" : "neda",
    "namespace" : "mycompany"
  }
}

Schema

Required

  • role_id (String) ID of the role which is going to be applied on the specified user.
  • user_id (String) ID of the user which the role is going to be binded to that.
  • workspace_id (String) ID of the workspace which the role is goling to be applied on the scope of that.

Optional

  • items (Map of String) Items of the role-user binding.

Read-Only

  • id (String) ID of the binding
  • last_updated (String) Timestamp of the last Terraform update of the role-user.

Import

Import is supported using the following syntax:

# Replace <role-id>, <user-id> and <workspace-id> with real values
terraform import sotoon_iam_role_user_binding.john_is_compute_viewer "<role-id>:<user-id>:<workspace-id>"

# For example:
terraform import sotoon_iam_role_user_binding.john_is_compute_viewer \
    "b8c133a4-a060-4906-8654-57988dbdf098:34f57a2f-6e4d-4ded-9025-ff00911d3313:ee6f89b5-e07c-42f1-9462-05cec9cd92d8"