data_source_ibm_iam_roles.go

// Copyright IBM Corp. 2017, 2021 All Rights Reserved.
// Licensed under the Mozilla Public License v2.0

package iampolicy

import (
	"github.com/IBM-Cloud/terraform-provider-ibm/ibm/conns"
	"github.com/IBM-Cloud/terraform-provider-ibm/ibm/flex"
	"github.com/IBM/platform-services-go-sdk/iampolicymanagementv1"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
)

func DataSourceIBMIAMRole() *schema.Resource {
	return &schema.Resource{
		Read: datasourceIBMIAMRoleRead,

		Schema: map[string]*schema.Schema{
			"service": {
				Type:        schema.TypeString,
				Optional:    true,
				Description: "The Service Name",
				ForceNew:    true,
			},
			"roles": {
				Type:     schema.TypeList,
				Computed: true,
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{
						"name": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"type": {
							Type:     schema.TypeString,
							Computed: true,
						},
						"description": {
							Type:     schema.TypeString,
							Computed: true,
						},
					},
				},
			},
		},
	}

}

func datasourceIBMIAMRoleRead(d *schema.ResourceData, meta interface{}) error {
	iamPolicyManagementClient, err := meta.(conns.ClientSession).IAMPolicyManagementV1API()
	if err != nil {
		return err
	}

	userDetails, err := meta.(conns.ClientSession).BluemixUserDetails()
	if err != nil {
		return err
	}

	var serviceName string
	var customRoles []iampolicymanagementv1.CustomRole
	var serviceRoles, systemRoles []iampolicymanagementv1.Role

	listRoleOptions := &iampolicymanagementv1.ListRolesOptions{
		AccountID: &userDetails.UserAccount,
	}

	if service, ok := d.GetOk("service"); ok {
		serviceName = service.(string)
		listRoleOptions.ServiceName = &serviceName
	}
	roleList, _, err := iamPolicyManagementClient.ListRoles(listRoleOptions)
	if err != nil {
		return err
	}
	customRoles = roleList.CustomRoles
	serviceRoles = roleList.ServiceRoles
	systemRoles = roleList.SystemRoles

	d.SetId(userDetails.UserAccount)

	roles := append(flex.FlattenRoleData(systemRoles, "platform"), append(flex.FlattenRoleData(serviceRoles, "service"), flex.FlattenCustomRoleData(customRoles, "custom")...)...)

	d.Set("roles", roles)

	return nil
}