|
| 1 | +// get the default organization ID. The deployer user is on the default organization. |
| 2 | +data "zitadel_orgs" "default" { |
| 3 | + name = "ZITADEL" |
| 4 | + name_method = "TEXT_QUERY_METHOD_EQUALS" |
| 5 | +} |
| 6 | + |
| 7 | +// get the user ID of the default service account admin user. |
| 8 | +data "zitadel_machine_users" "zitadel-admin-sa" { |
| 9 | + user_name = "zitadel-admin-sa" |
| 10 | + user_name_method = "TEXT_QUERY_METHOD_EQUALS" |
| 11 | +} |
| 12 | + |
| 13 | +# get access token to make API calls. |
| 14 | +resource "zitadel_personal_access_token" "apiclient_user_id_token" { |
| 15 | + org_id = data.zitadel_orgs.default.ids[0] |
| 16 | + user_id = data.zitadel_machine_users.zitadel-admin-sa.user_ids[0] |
| 17 | +} |
| 18 | + |
| 19 | + |
| 20 | +resource "zitadel_human_user" "test-users" { |
| 21 | + for_each = {for i, item in var.test_users : i => item} |
| 22 | + |
| 23 | + org_id = var.xpanse_org_id |
| 24 | + user_name = each.value.email |
| 25 | + first_name = each.value.name |
| 26 | + last_name = each.value.name |
| 27 | + nick_name = each.value.name |
| 28 | + display_name = each.value.name |
| 29 | + preferred_language = "en" |
| 30 | + gender = "GENDER_MALE" |
| 31 | + phone = "+41799999999" |
| 32 | + is_phone_verified = true |
| 33 | + email = each.value.email |
| 34 | + is_email_verified = true |
| 35 | + initial_password = "Password1!" |
| 36 | +} |
| 37 | + |
| 38 | +locals { |
| 39 | + roles_map = { |
| 40 | + for created_users in zitadel_human_user.test-users : created_users.user_name => [ |
| 41 | + for test_user in var.test_users : { id : created_users.id, roles : test_user.roles } |
| 42 | + if test_user.email == created_users.user_name |
| 43 | + ] |
| 44 | + } |
| 45 | + |
| 46 | + passwords_map = { |
| 47 | + for created_users in zitadel_human_user.test-users : created_users.user_name => [ |
| 48 | + for test_user in var.test_users : { id : created_users.id, password : test_user.password } |
| 49 | + if test_user.email == created_users.user_name |
| 50 | + ] |
| 51 | + } |
| 52 | + |
| 53 | + meta_data_map = flatten([ |
| 54 | + for created_users in zitadel_human_user.test-users : [ |
| 55 | + for test_user in var.test_users : [ |
| 56 | + for meta_data_entry in test_user.meta-data :{ |
| 57 | + id : created_users.id, user_name : created_users.user_name, data_key : meta_data_entry.key, |
| 58 | + data_value : meta_data_entry.value |
| 59 | + } if created_users.user_name == test_user.email |
| 60 | + ] |
| 61 | + ] |
| 62 | + ]) |
| 63 | +} |
| 64 | + |
| 65 | +resource "zitadel_user_grant" "test-roles" { |
| 66 | + for_each = local.roles_map |
| 67 | + |
| 68 | + project_id = var.xpanse_project_id |
| 69 | + org_id = var.xpanse_org_id |
| 70 | + role_keys = each.value[0].roles |
| 71 | + user_id = each.value[0].id |
| 72 | +} |
| 73 | + |
| 74 | +resource "zitadel_user_metadata" "meta-data" { |
| 75 | + for_each = {for obj in local.meta_data_map : "${obj.user_name}-${obj.data_key}" => obj} |
| 76 | + |
| 77 | + org_id = var.xpanse_org_id |
| 78 | + user_id = each.value.id |
| 79 | + key = each.value.data_key |
| 80 | + value = each.value.data_value |
| 81 | +} |
| 82 | + |
| 83 | +//direct API call since no terraform module available for creating client credentials |
| 84 | +resource "terracurl_request" "update_password" { |
| 85 | + lifecycle { |
| 86 | + ignore_changes = all |
| 87 | + } |
| 88 | + for_each = local.passwords_map |
| 89 | + name = "update_password" |
| 90 | + url = "http://${var.domain}:${var.port}/v2/users/${each.value[0].id}/password" |
| 91 | + method = "POST" |
| 92 | + response_codes = [ |
| 93 | + 200 |
| 94 | + ] |
| 95 | + headers = { |
| 96 | + x-zitadel-orgid = var.xpanse_org_id |
| 97 | + Content-Type = "application/json" |
| 98 | + Accept = "application/json" |
| 99 | + Authorization = "Bearer ${resource.zitadel_personal_access_token.apiclient_user_id_token.token}" |
| 100 | + } |
| 101 | + request_body = <<EOF |
| 102 | + { |
| 103 | + "newPassword":{ |
| 104 | + "password": "${each.value[0].password}", |
| 105 | + "changeRequired":false |
| 106 | + }, |
| 107 | + "currentPassword":"Password1!" |
| 108 | +} |
| 109 | + EOF |
| 110 | +} |
0 commit comments