selectel_iam_saml_federation_group_mappings_v1

к сведению

Эта инструкция — копия документации Selectel Terraform-провайдера в Terraform Registry.

Manages SAML federation group mappings for Selectel products using public API v1. Selectel products support Identity and Access Management (IAM). For more information about federations, see the official Selectel documentation.

Example Usage

resource "selectel_iam_group_v1" "group_1" {
  name = "example-group"

  role {
    role_name = "reader"
    scope     = "account"
  }
}

resource "selectel_iam_saml_federation_v1" "federation_1" {
  name                  = "Federation name"
  description           = "Federation description"
  issuer                = "https://idp.example.com/realms/master"
  sso_url               = "https://idp.example.com/realms/master/protocol/saml"
  session_max_age_hours = 24
}

resource "selectel_iam_saml_federation_group_mappings_v1" "group_mappings_1" {
  federation_id = selectel_iam_saml_federation_v1.federation_1.id

  group_mapping {
    internal_group_id = selectel_iam_group_v1.group_1.id
    external_group_id = "external-group-1"
  }
}

Argument Reference

federation_id - (Required) Federation ID to manage group mappings.
group_mapping - (Required) Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
- internal_group_id - (Required) Internal IAM group ID.
- external_group_id - (Required) External identity provider group ID.

Attributes Reference

id - Resource ID. Equals the federation_id value.

Import

You can import SAML Federation group mappings:

export OS_DOMAIN_NAME=<account_id>
export OS_USERNAME=<username>
export OS_PASSWORD=<password>
terraform import selectel_iam_saml_federation_group_mappings_v1.group_mappings_1 <federation_id>

where:

<account_id> — Selectel account ID. The account ID is in the top right corner of the Control panel. Learn more about Registration.
<username> — Name of the service user. To get the name, in the Control panel, go to Account ⟶ the Service users tab ⟶ copy the name of the required user. Learn more about Service Users.
<password> — Password of the service user.
<federation_id> — Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, use either Control Panel or Federations API.