gantrycd_group_role_binding (Resource)

Binds an SSO identity-source group to a set of roles: every user the SSO provider reports as a member of the group inherits the bound roles.

Example Usage

# Every user the SSO provider reports as a member of the group inherits the
# bound roles.
resource "gantrycd_group_role_binding" "platform_team" {
  identity_source_id = "ids_01HXXXXXXXXXXXXXXXXXXXXXXX"
  group_key          = "platform-team"
  role_keys          = ["stack-admin", "iam-admin"]
}

Schema

Required

• group_key (String) Group identifier as reported by the SSO provider. Requires replacement.
• identity_source_id (String) SSO identity source the group belongs to. Requires replacement.
• role_keys (List of String) Keys of the roles bound to the group. Full replacement on every write: the configured list becomes the binding’s complete role set. Mutable in place (no replacement required).

Read-Only

• id (String) Server-assigned binding UUID. Used as the Terraform import id.
• identity_realm (String) Identity realm inherited from the configured provider.

Import

Import is supported using the following syntax:

The terraform import command can be used, for example:

# Import by binding id. The API returns role ids, not keys, so set role_keys in
# configuration to match before the next apply.
terraform import gantrycd_group_role_binding.platform_team grb_01HXXXXXXXXXXXXXXXXXXXXXXX