IO Ready and new IAM Endpoints (#864)

## 📝 Description

Adds `io_ready` field to Volumes and 2 new endpoints for IAM

## ✔️ How to Test

```
make test-unit
```

Author: jriddle-linode

entities.go

@@ -2,12 +2,25 @@ package linodego
 
 import "context"
 
+// LinodeEntity is anything in Linode with IAM Permissions
 type LinodeEntity struct {
 	ID    int    `json:"id"`
 	Label string `json:"label"`
 	Type  string `json:"type"`
 }
 
+// ListEntities returns a paginated list of all entities
 func (c *Client) ListEntities(ctx context.Context, opts *ListOptions) ([]LinodeEntity, error) {
 	return getPaginatedResults[LinodeEntity](ctx, c, "entities", opts)
 }
+
+// GetEntityRoles returns a list of roles for the entity and user
+func (c *Client) GetEntityRoles(ctx context.Context, username string, entityType string, entityID int) ([]string, error) {
+	perms, err := doGETRequest[[]string](ctx, c,
+		formatAPIPath("iam/users/%s/permissions/%s/%d", username, entityType, entityID))
+	if err != nil || perms == nil {
+		return nil, err
+	}
+
+	return (*perms), err
+}

iam.go

@@ -2,58 +2,79 @@ package linodego
 
 import "context"
 
+// UserRolePermissions are the account and entity permissions for the User
 type UserRolePermissions struct {
 	AccountAccess []string     `json:"account_access"`
 	EntityAccess  []UserAccess `json:"entity_access"`
 }
 
+// GetUpdateOptions converts UserRolePermissions for use in UpdateUserRolePermissions
 func (p *UserRolePermissions) GetUpdateOptions() UserRolePermissionsUpdateOptions {
 	return UserRolePermissionsUpdateOptions{
 		AccountAccess: p.AccountAccess,
 		EntityAccess:  p.EntityAccess,
 	}
 }
 
+// UserRolePermissionsUpdateOptions are fields accepted by UpdateUserRolePermissions
 type UserRolePermissionsUpdateOptions struct {
 	AccountAccess []string     `json:"account_access"`
 	EntityAccess  []UserAccess `json:"entity_access"`
 }
 
+// UserAccess is the breakdown of entities Roles
 type UserAccess struct {
 	ID    int      `json:"id"`
 	Type  string   `json:"type"`
 	Roles []string `json:"roles"`
 }
 
+// AccountRolePermissions are the account and entity roles for the Account
 type AccountRolePermissions struct {
 	AccountAccess []AccountAccess `json:"account_access"`
 	EntityAccess  []AccountAccess `json:"entity_access"`
 }
 
+// AccountAccess is the Roles for each Type for the Account
 type AccountAccess struct {
 	Type  string `json:"type"`
 	Roles []Role `json:"roles"`
 }
 
+// Role is the IAM Role and its Permissions
 type Role struct {
 	Name        string   `json:"name"`
 	Description string   `json:"description"`
 	Permissions []string `json:"permissions"`
 }
 
+// GetUserRolePermissions returns any role permissions for username
 func (c *Client) GetUserRolePermissions(ctx context.Context, username string) (*UserRolePermissions, error) {
 	return doGETRequest[UserRolePermissions](ctx, c,
 		formatAPIPath("iam/users/%s/role-permissions", username),
 	)
 }
 
+// UpdateUserRolePermissions updates any role permissions for username
 func (c *Client) UpdateUserRolePermissions(ctx context.Context, username string, opts UserRolePermissionsUpdateOptions) (*UserRolePermissions, error) {
 	return doPUTRequest[UserRolePermissions](ctx, c,
 		formatAPIPath("iam/users/%s/role-permissions", username),
 		opts,
 	)
 }
 
+// GetAccountRolePermissions returns the role permissions for this Account
 func (c *Client) GetAccountRolePermissions(ctx context.Context) (*AccountRolePermissions, error) {
 	return doGETRequest[AccountRolePermissions](ctx, c, "iam/role-permissions")
 }
+
+// GetUserAccountPermissions returns the account permissions for username
+func (c *Client) GetUserAccountPermissions(ctx context.Context, username string) ([]string, error) {
+	perms, err := doGETRequest[[]string](ctx, c,
+		formatAPIPath("iam/users/%s/permissions/account", username))
+	if err != nil || perms == nil {
+		return nil, err
+	}
+
+	return (*perms), err
+}

test/unit/entities_test.go

@@ -23,3 +23,19 @@ func TestEntities_List(t *testing.T) {
 
 	assert.Equal(t, 7, entities[0].ID)
 }
+
+func TestEntitiesPermissions_Get(t *testing.T) {
+	fixtureData, err := fixtures.GetFixture("entities_permissions")
+	assert.NoError(t, err)
+
+	var base ClientBaseCase
+	base.SetUp(t)
+	defer base.TearDown(t)
+
+	base.MockGet(formatMockAPIPath("iam/users/Linode/permissions/linode/123"), fixtureData)
+
+	perms, err := base.Client.GetEntityRoles(context.Background(), "Linode", "linode", 123)
+	assert.NoError(t, err)
+
+	assert.Equal(t, "rebuild_linode", perms[1])
+}

test/unit/fixtures/entities_permissions.json

@@ -0,0 +1,5 @@
+[
+    "generate_linode_lish_token_remote",
+    "rebuild_linode",
+    "shutdown_linode"
+]

test/unit/fixtures/iam_user_account_permissions_get.json

@@ -0,0 +1,5 @@
+[
+    "list_events",
+    "view_account_settings",
+    "cancel_account"
+]

test/unit/fixtures/volume_get.json

@@ -10,7 +10,8 @@
     "hardware_type": "",
     "linode_label": "",
     "encryption": "",
+    "io_ready": true,
     "created": "2025-01-01T12:00:00",
     "updated": "2025-01-10T12:00:00"
 }
-  
+

test/unit/iam_test.go

@@ -61,3 +61,19 @@ func TestIAMUserRolePermissions_Update(t *testing.T) {
 	assert.Equal(t, 1, after.EntityAccess[0].ID)
 	assert.NotEqual(t, before.AccountAccess, after.AccountAccess)
 }
+
+func TestIAMUserAccountPermissions_Get(t *testing.T) {
+	fixtureData, err := fixtures.GetFixture("iam_user_account_permissions_get")
+	assert.NoError(t, err)
+
+	var base ClientBaseCase
+	base.SetUp(t)
+	defer base.TearDown(t)
+
+	base.MockGet(formatMockAPIPath("iam/users/Linode/permissions/account"), fixtureData)
+
+	perms, err := base.Client.GetUserAccountPermissions(context.Background(), "Linode")
+	assert.NoError(t, err)
+
+	assert.Equal(t, "list_events", perms[0])
+}

test/unit/volume_test.go

@@ -58,6 +58,7 @@ func TestGetVolume(t *testing.T) {
 	assert.Contains(t, volume.Tags, "test", "Expected tags to include 'test'")
 	assert.Empty(t, volume.HardwareType, "Expected hardware type to be empty")
 	assert.Empty(t, volume.LinodeLabel, "Expected Linode label to be empty")
+	assert.Equal(t, true, volume.IOReady, "Expected IO Ready true")
 }
 
 func TestCreateVolume(t *testing.T) {

volumes.go

@@ -37,6 +37,7 @@ type Volume struct {
 	Tags           []string     `json:"tags"`
 	HardwareType   string       `json:"hardware_type"`
 	LinodeLabel    string       `json:"linode_label"`
+	IOReady        bool         `json:"io_ready"`
 	Created        *time.Time   `json:"-"`
 	Updated        *time.Time   `json:"-"`