feat: first draft implementation for iam resources on google_iam_workforce_pool

Author: ramonvermeulen

mmv1/products/iamworkforcepool/WorkforcePool.yaml

@@ -61,6 +61,13 @@ examples:
       workforce_pool_id: 'example-pool'
     test_env_vars:
       org_id: 'ORG_ID'
+iam_policy:
+  parent_resource_attribute: 'workforce_pool_id'
+  method_name_separator: ':'
+  fetch_iam_policy_verb: 'POST'
+  import_format:
+    - 'locations/{{location}}/workforcePools/{{workforce_pool_id}}'
+    - '{{workforce_pool_id}}'
 parameters:
 properties:
   - name: 'location'

mmv1/third_party/terraform/services/iamworkforcepool/resource_iam_workforce_pool_test.go.tmpl

@@ -28,6 +28,11 @@ func TestAccIAMWorkforcePoolWorkforcePool_full(t *testing.T) {
 				ImportState:       true,
 				ImportStateVerify: true,
 			},
+            {
+                ResourceName:      "google_iam_workforce_pool_iam_member.my_member",
+				ImportState:       true,
+				ImportStateVerify: true,
+            }
 			{
 				Config: testAccIAMWorkforcePoolWorkforcePool_full_update(context),
 			},
@@ -36,6 +41,11 @@ func TestAccIAMWorkforcePoolWorkforcePool_full(t *testing.T) {
 				ImportState:       true,
 				ImportStateVerify: true,
 			},
+			{
+				ResourceName:      "google_iam_workforce_pool_iam_member.my_member",
+				ImportState:       true,
+				ImportStateVerify: true,
+			}
 		},
 	})
 }
@@ -90,6 +100,13 @@ resource "google_iam_workforce_pool" "my_pool" {
     disable_programmatic_signin = false
   }
 }
+
+resource  "google_iam_workforce_pool_iam_member" "my_member" {
+  location          = google_iam_workforce_pool.my_pool.location
+  workforce_pool_id = google_iam_workforce_pool.my_pool.workforce_pool_id
+  role              = "roles/iam.workforcePoolViewer"
+  member            = "user:jane@example.com"
+}
 `, context)
 }
 
@@ -120,6 +137,13 @@ resource "google_iam_workforce_pool" "my_pool" {
     disable_programmatic_signin = false
   }
 }
+
+resource  "google_iam_workforce_pool_iam_member" "my_member" {
+  location          = google_iam_workforce_pool.my_pool.location
+  workforce_pool_id = google_iam_workforce_pool.my_pool.workforce_pool_id
+  role              = "roles/iam.workforcePoolViewer"
+  member            = "user:bob@example.com"
+}
 `, context)
 }