Merge pull request #5861 from cloudflare/tamas/zero_trust_access_group

chore: modernize zero_trust_access_group tests

Author: tamas-jozsa

internal/services/zero_trust_access_group/resource_test.go

@@ -0,0 +1,41 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      email = {
+        email = "[email protected]"
+      }
+    },
+    {
+      email_domain = {
+        domain = "example.com"
+      }
+    },
+    {
+      ip = {
+        ip = "192.0.2.1/32"
+      }
+    },
+    {
+      geo = {
+        country_code = "US"
+      }
+    },
+    {
+      everyone = {}
+    },
+    {
+      any_valid_service_token = {}
+    },
+    {
+      certificate = {}
+    },
+    {
+      auth_method = {
+        auth_method = "swk"
+      }
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigallincluderules.tf

@@ -0,0 +1,45 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      email = {
+        email = "[email protected]"
+      }
+    }
+  ]
+  
+  exclude = [
+    {
+      geo = {
+        country_code = "CN"
+      }
+    },
+    {
+      device_posture = {
+        integration_uid = "test-device-posture-uid"
+      }
+    },
+    {
+      external_evaluation = {
+        evaluate_url = "https://example.com/evaluate"
+        keys_url     = "https://example.com/keys"
+      }
+    }
+  ]
+
+  require = [
+    {
+      auth_method = {
+        auth_method = "hwk"
+      }
+    },
+    {
+      certificate = {}
+    },
+    {
+      any_valid_service_token = {}
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigallruletypes.tf

@@ -0,0 +1,33 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      email = {
+        email = "[email protected]"
+      }
+    },
+    {
+      ip = {
+        ip = "10.0.0.0/8"
+      }
+    }
+  ]
+
+  exclude = [
+    {
+      email = {
+        email = "[email protected]"
+      }
+    }
+  ]
+
+  require = [
+    {
+      email_domain = {
+        domain = "company.com"
+      }
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigcomplexrules.tf

@@ -0,0 +1,12 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      device_posture = {
+        integration_uid = "test-device-posture-uid"
+      }
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigdeviceposture.tf

@@ -0,0 +1,13 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      external_evaluation = {
+        evaluate_url = "https://example.com/evaluate"
+        keys_url     = "https://example.com/keys"
+      }
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigexternalevaluation.tf

@@ -0,0 +1,13 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      gsuite = {
+        email                = "[email protected]"
+        identity_provider_id = "gsuite-idp-id"
+      }
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfiggsuite.tf

@@ -0,0 +1,33 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      email = {
+        email = "[email protected]"
+      }
+    },
+    {
+      ip = {
+        ip = "192.0.2.0/24"
+      }
+    }
+  ]
+
+  exclude = [
+    {
+      ip = {
+        ip = "192.0.2.100/32"
+      }
+    }
+  ]
+
+  require = [
+    {
+      email_domain = {
+        domain = "company.com"
+      }
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigloginmethod.tf

@@ -0,0 +1,10 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      everyone = {}
+    }
+  ]
+}

internal/services/zero_trust_access_group/testdata/accessgroupconfigminimal.tf

@@ -0,0 +1,14 @@
+resource "cloudflare_zero_trust_access_group" "%[1]s" {
+  account_id = "%[2]s"
+  name       = "%[1]s"
+
+  include = [
+    {
+      oidc = {
+        claim_name           = "groups"
+        claim_value          = "admin"
+        identity_provider_id = "oidc-idp-id"
+      }
+    }
+  ]
+}