feat: Add new resource mongodbatlas_cloud_user_project_assignment (#3568)

* WIP- Created resource

* Added model tests

* Added tests

* Fixed import

* Typo

* Preview new SDK version

* WIP - Migration test

* WIP - migration test

* Updated SDK

* Revert "Updated SDK"

This reverts commit f8d2d0a.

* Updated SDK

* Fixed migration test

* Changelog

* CheckDestroy

* Refactor

* typo

* Fix

* Added TestNewAtlasUpdateReq

* Empty/nil test cases

* Fix

* Added active user to test

* Added MONGODB_ATLAS_USERNAME_2

* Changed Update to read from API

* Added comment

* feat: Add new singular data source mongodbatlas_cloud_user_project_assignment (#3569)

* Add schema and Read() method

* Add data source to provider

* WIP

* Tests

* Changed tests

* Changelog

* Refactor

* Typo

* Fix

* Updated tests

* Fixed test

* Added error

---------

Co-authored-by: Cristina Sánchez Sánchez <[email protected]>

---------

Co-authored-by: Cristina Sánchez Sánchez <[email protected]>

Author: csanx

.changelog/3568.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+resource/mongodbatlas_cloud_user_project_assignment 
+```

.changelog/3569.txt

@@ -0,0 +1,3 @@
+```release-note:new-datasource
+data-source/mongodbatlas_cloud_user_project_assignment 
+```

.github/workflows/acceptance-tests-runner.yml

@@ -305,6 +305,7 @@ jobs:
             - 'internal/service/controlplaneipaddresses/*.go'
           cloud_user:
             - 'internal/service/clouduserorgassignment/*.go'
+            - 'internal/service/clouduserprojectassignment/*.go'
             - 'internal/service/clouduserteamassignment/*.go'
           cluster:
             - 'internal/service/cluster/*.go'
@@ -601,8 +602,10 @@ jobs:
           MONGODB_ATLAS_PROJECT_OWNER_ID: ${{ inputs.mongodb_atlas_project_owner_id }}
           MONGODB_ATLAS_ORG_ID: ${{ inputs.mongodb_atlas_org_id }}
           MONGODB_ATLAS_USERNAME: ${{ vars.MONGODB_ATLAS_USERNAME }}
+          MONGODB_ATLAS_USERNAME_2: ${{ vars.MONGODB_ATLAS_USERNAME_2 }}
           ACCTEST_PACKAGES: |
             ./internal/service/clouduserorgassignment
+            ./internal/service/clouduserprojectassignment
             ./internal/service/clouduserteamassignment
         run: make testacc
 

internal/provider/provider.go

@@ -30,6 +30,7 @@ import (
 	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/apikeyprojectassignment"
 	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/atlasuser"
 	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/clouduserorgassignment"
+	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/clouduserprojectassignment"
 	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/clouduserteamassignment"
 	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/controlplaneipaddresses"
 	"github.com/mongodb/terraform-provider-mongodbatlas/internal/service/databaseuser"
@@ -462,6 +463,7 @@ func (p *MongodbtlasProvider) DataSources(context.Context) []func() datasource.D
 		resourcepolicy.DataSource,
 		resourcepolicy.PluralDataSource,
 		clouduserorgassignment.DataSource,
+		clouduserprojectassignment.DataSource,
 		clouduserteamassignment.DataSource,
 		teamprojectassignment.DataSource,
 		apikeyprojectassignment.DataSource,
@@ -491,6 +493,7 @@ func (p *MongodbtlasProvider) Resources(context.Context) []func() resource.Resou
 		resourcepolicy.Resource,
 		clouduserorgassignment.Resource,
 		apikeyprojectassignment.Resource,
+		clouduserprojectassignment.Resource,
 		teamprojectassignment.Resource,
 		clouduserteamassignment.Resource,
 		advancedclustertpf.Resource,

internal/service/clouduserprojectassignment/data_source.go

@@ -0,0 +1,61 @@
+package clouduserprojectassignment
+
+import (
+	"context"
+
+	"github.com/hashicorp/terraform-plugin-framework/datasource"
+	"github.com/mongodb/terraform-provider-mongodbatlas/internal/config"
+)
+
+var _ datasource.DataSource = &cloudUserProjectAssignmentDS{}
+var _ datasource.DataSourceWithConfigure = &cloudUserProjectAssignmentDS{}
+
+func DataSource() datasource.DataSource {
+	return &cloudUserProjectAssignmentDS{
+		DSCommon: config.DSCommon{
+			DataSourceName: resourceName,
+		},
+	}
+}
+
+type cloudUserProjectAssignmentDS struct {
+	config.DSCommon
+}
+
+func (d *cloudUserProjectAssignmentDS) Schema(ctx context.Context, req datasource.SchemaRequest, resp *datasource.SchemaResponse) {
+	resp.Schema = dataSourceSchema()
+}
+
+func (d *cloudUserProjectAssignmentDS) Read(ctx context.Context, req datasource.ReadRequest, resp *datasource.ReadResponse) {
+	var state TFModel
+	resp.Diagnostics.Append(req.Config.Get(ctx, &state)...)
+	if resp.Diagnostics.HasError() {
+		return
+	}
+
+	connV2 := d.Client.AtlasV2
+	projectID := state.ProjectId.ValueString()
+	userID := state.UserId.ValueString()
+	username := state.Username.ValueString()
+
+	if username == "" && userID == "" {
+		resp.Diagnostics.AddError("invalid configuration", "either username or user_id must be provided")
+		return
+	}
+	userResp, err := fetchProjectUser(ctx, connV2, projectID, userID, username)
+	if err != nil {
+		resp.Diagnostics.AddError(errorReadingUser, err.Error())
+		return
+	}
+	if userResp == nil {
+		resp.Diagnostics.AddError("resource not found", "no user found with the specified identifier")
+		return
+	}
+
+	newCloudUserProjectAssignmentModel, diags := NewTFModel(ctx, projectID, userResp)
+	if diags.HasError() {
+		resp.Diagnostics.Append(diags...)
+		return
+	}
+	resp.Diagnostics.Append(resp.State.Set(ctx, newCloudUserProjectAssignmentModel)...)
+}

internal/service/clouduserprojectassignment/main_test.go

@@ -0,0 +1,15 @@
+package clouduserprojectassignment_test
+
+import (
+	"os"
+	"testing"
+
+	"github.com/mongodb/terraform-provider-mongodbatlas/internal/testutil/acc"
+)
+
+func TestMain(m *testing.M) {
+	cleanup := acc.SetupSharedResources()
+	exitCode := m.Run()
+	cleanup()
+	os.Exit(exitCode)
+}

internal/service/clouduserprojectassignment/model.go

@@ -0,0 +1,98 @@
+package clouduserprojectassignment
+
+import (
+	"context"
+
+	"github.com/hashicorp/terraform-plugin-framework/diag"
+	"github.com/hashicorp/terraform-plugin-framework/types"
+	"github.com/mongodb/terraform-provider-mongodbatlas/internal/common/conversion"
+
+	"go.mongodb.org/atlas-sdk/v20250312006/admin"
+)
+
+func NewTFModel(ctx context.Context, projectID string, apiResp *admin.GroupUserResponse) (*TFModel, diag.Diagnostics) {
+	diags := diag.Diagnostics{}
+
+	if apiResp == nil {
+		return nil, diags
+	}
+
+	roles := conversion.TFSetValueOrNull(ctx, &apiResp.Roles, types.StringType)
+
+	return &TFModel{
+		Country:             types.StringPointerValue(apiResp.Country),
+		CreatedAt:           types.StringPointerValue(conversion.TimePtrToStringPtr(apiResp.CreatedAt)),
+		FirstName:           types.StringPointerValue(apiResp.FirstName),
+		ProjectId:           types.StringValue(projectID),
+		UserId:              types.StringValue(apiResp.Id),
+		InvitationCreatedAt: types.StringPointerValue(conversion.TimePtrToStringPtr(apiResp.InvitationCreatedAt)),
+		InvitationExpiresAt: types.StringPointerValue(conversion.TimePtrToStringPtr(apiResp.InvitationExpiresAt)),
+		InviterUsername:     types.StringPointerValue(apiResp.InviterUsername),
+		LastAuth:            types.StringPointerValue(conversion.TimePtrToStringPtr(apiResp.LastAuth)),
+		LastName:            types.StringPointerValue(apiResp.LastName),
+		MobileNumber:        types.StringPointerValue(apiResp.MobileNumber),
+		OrgMembershipStatus: types.StringValue(apiResp.GetOrgMembershipStatus()),
+		Roles:               roles,
+		Username:            types.StringValue(apiResp.GetUsername()),
+	}, diags
+}
+
+func NewProjectUserReq(ctx context.Context, plan *TFModel) (*admin.GroupUserRequest, diag.Diagnostics) {
+	roleNames := []string{}
+	if !plan.Roles.IsNull() && !plan.Roles.IsUnknown() {
+		roleNames = conversion.TypesSetToString(ctx, plan.Roles)
+	}
+
+	addProjectUserReq := admin.GroupUserRequest{
+		Username: plan.Username.ValueString(),
+		Roles:    roleNames,
+	}
+	return &addProjectUserReq, nil
+}
+
+func NewAtlasUpdateReq(ctx context.Context, plan *TFModel, currentRoles []string) (addRequests, removeRequests []*admin.AddOrRemoveGroupRole, diags diag.Diagnostics) {
+	var desiredRoles []string
+	if !plan.Roles.IsNull() && !plan.Roles.IsUnknown() {
+		desiredRoles = conversion.TypesSetToString(ctx, plan.Roles)
+	}
+
+	rolesToAdd, rolesToRemove := diffRoles(currentRoles, desiredRoles)
+
+	addRequests = make([]*admin.AddOrRemoveGroupRole, 0, len(rolesToAdd))
+	for _, role := range rolesToAdd {
+		addRequests = append(addRequests, &admin.AddOrRemoveGroupRole{
+			GroupRole: role,
+		})
+	}
+
+	removeRequests = make([]*admin.AddOrRemoveGroupRole, 0, len(rolesToRemove))
+	for _, role := range rolesToRemove {
+		removeRequests = append(removeRequests, &admin.AddOrRemoveGroupRole{
+			GroupRole: role,
+		})
+	}
+
+	return addRequests, removeRequests, nil
+}
+
+func diffRoles(oldRoles, newRoles []string) (toAdd, toRemove []string) {
+	oldRolesMap := make(map[string]bool, len(oldRoles))
+
+	for _, role := range oldRoles {
+		oldRolesMap[role] = true
+	}
+
+	for _, role := range newRoles {
+		if oldRolesMap[role] {
+			delete(oldRolesMap, role)
+		} else {
+			toAdd = append(toAdd, role)
+		}
+	}
+
+	for role := range oldRolesMap {
+		toRemove = append(toRemove, role)
+	}
+
+	return toAdd, toRemove
+}