feat(group mapping) Add group mapping resource which can be used for both monitor and secure (#254)

* feat(groupmapping): add group mapping resource

* feat(groupmapping): read resource after create update

* feat(groupmapping): enable import for group mapping resource

* feat(groupmapping): add acceptance tests for group mapping

* feat(groupmapping): update tests

* feat(groupmapping): add group mapping docs

* feat(groupmapping): add filiptubic as group mapping code owner

* feat(groupmapping): fix lint errors

* feat(groupmapping): update docs

* feat(groupmapping): add system_role to group mapping

---------

Co-authored-by: Filip Tubic <[email protected]>

Author: filiptubic

CODEOWNERS

@@ -8,6 +8,7 @@
 *monitor*alert* @arturodilecce @dbonf
 *monitor*dashboard* @brokenpip3
 *monitor*providers* @jwsarna1
+*monitor*groupmapping* @filiptubic
 
 # policies/rules
 *secure*policy* @jacklongsd @kmvachhani @ben-m-lucas

sysdig/internal/client/common/client.go

@@ -18,6 +18,11 @@ type SysdigCommonClient interface {
 	DeleteUser(context.Context, int) error
 	UpdateUser(context.Context, *User) (*User, error)
 	GetCurrentUser(context.Context) (*User, error)
+
+	CreateGroupMapping(ctx context.Context, request *GroupMapping) (*GroupMapping, error)
+	UpdateGroupMapping(ctx context.Context, request *GroupMapping, id int) (*GroupMapping, error)
+	DeleteGroupMapping(ctx context.Context, id int) error
+	GetGroupMapping(ctx context.Context, id int) (*GroupMapping, error)
 }
 
 func WithExtraHeaders(client SysdigCommonClient, extraHeaders map[string]string) SysdigCommonClient {

sysdig/internal/client/common/groupmapping.go

@@ -0,0 +1,130 @@
+package common
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+)
+
+var GroupMappingNotFound = errors.New("group mapping not found")
+
+func (client *sysdigCommonClient) CreateGroupMapping(ctx context.Context, request *GroupMapping) (*GroupMapping, error) {
+	payload, err := request.ToJSON()
+	if err != nil {
+		return nil, err
+	}
+
+	response, err := client.doSysdigCommonRequest(ctx, http.MethodPost, client.CreateGroupMappingUrl(), payload)
+	if err != nil {
+		return nil, err
+	}
+	defer response.Body.Close()
+
+	if response.StatusCode != http.StatusOK {
+		return nil, errorFromResponse(response)
+	}
+
+	body, err := io.ReadAll(response.Body)
+	if err != nil {
+		return nil, err
+	}
+
+	var groupMapping GroupMapping
+	err = json.Unmarshal(body, &groupMapping)
+	if err != nil {
+		return nil, err
+	}
+
+	return &groupMapping, nil
+}
+
+func (client *sysdigCommonClient) UpdateGroupMapping(ctx context.Context, request *GroupMapping, id int) (*GroupMapping, error) {
+	payload, err := request.ToJSON()
+	if err != nil {
+		return nil, err
+	}
+
+	response, err := client.doSysdigCommonRequest(ctx, http.MethodPut, client.UpdateGroupMappingUrl(id), payload)
+	if err != nil {
+		return nil, err
+	}
+	defer response.Body.Close()
+
+	if response.StatusCode != http.StatusOK {
+		return nil, errorFromResponse(response)
+	}
+
+	body, err := io.ReadAll(response.Body)
+	if err != nil {
+		return nil, err
+	}
+
+	var groupMapping GroupMapping
+	err = json.Unmarshal(body, &groupMapping)
+	if err != nil {
+		return nil, err
+	}
+
+	return &groupMapping, nil
+}
+
+func (client *sysdigCommonClient) DeleteGroupMapping(ctx context.Context, id int) error {
+	response, err := client.doSysdigCommonRequest(ctx, http.MethodDelete, client.DeleteGroupMappingUrl(id), nil)
+	if err != nil {
+		return err
+	}
+	defer response.Body.Close()
+
+	if response.StatusCode != http.StatusNoContent && response.StatusCode != http.StatusOK && response.StatusCode != http.StatusNotFound {
+		return errorFromResponse(response)
+	}
+
+	return nil
+}
+
+func (client *sysdigCommonClient) GetGroupMapping(ctx context.Context, id int) (*GroupMapping, error) {
+	response, err := client.doSysdigCommonRequest(ctx, http.MethodGet, client.GetGroupMappingUrl(id), nil)
+	if err != nil {
+		return nil, err
+	}
+	defer response.Body.Close()
+
+	if response.StatusCode != http.StatusOK {
+		if response.StatusCode == http.StatusNotFound {
+			return nil, GroupMappingNotFound
+		}
+		return nil, errorFromResponse(response)
+	}
+
+	body, err := io.ReadAll(response.Body)
+	if err != nil {
+		return nil, err
+	}
+
+	var groupMapping GroupMapping
+	err = json.Unmarshal(body, &groupMapping)
+	if err != nil {
+		return nil, err
+	}
+
+	return &groupMapping, nil
+}
+
+func (client *sysdigCommonClient) GetGroupMappingUrl(id int) string {
+	return fmt.Sprintf("%s/api/groupmappings/%d", client.URL, id)
+}
+
+func (client *sysdigCommonClient) CreateGroupMappingUrl() string {
+	return fmt.Sprintf("%s/api/groupmappings", client.URL)
+}
+
+func (client *sysdigCommonClient) UpdateGroupMappingUrl(id int) string {
+	return fmt.Sprintf("%s/api/groupmappings/%d", client.URL, id)
+}
+
+func (client *sysdigCommonClient) DeleteGroupMappingUrl(id int) string {
+	return fmt.Sprintf("%s/api/groupmappings/%d", client.URL, id)
+}

sysdig/internal/client/common/models.go

@@ -6,6 +6,28 @@ import (
 	"io"
 )
 
+// -------- Group mapping --------
+type TeamMap struct {
+	AllTeams bool  `json:"allTeams"`
+	TeamIDs  []int `json:"teamIds"`
+}
+
+type GroupMapping struct {
+	ID         int      `json:"id,omitempty"`
+	GroupName  string   `json:"groupName,omitempty"`
+	Role       string   `json:"role,omitempty"`
+	SystemRole string   `json:"systemRole,omitempty"`
+	TeamMap    *TeamMap `json:"teamMap,omitempty"`
+}
+
+func (gm *GroupMapping) ToJSON() (io.Reader, error) {
+	payload, err := json.Marshal(*gm)
+	if err != nil {
+		return nil, err
+	}
+	return bytes.NewBuffer(payload), nil
+}
+
 // -------- User --------
 type User struct {
 	ID         int    `json:"id,omitempty"`

sysdig/provider.go

@@ -49,7 +49,8 @@ func Provider() *schema.Provider {
 			},
 		},
 		ResourcesMap: map[string]*schema.Resource{
-			"sysdig_user": resourceSysdigUser(),
+			"sysdig_user":          resourceSysdigUser(),
+			"sysdig_group_mapping": resourceSysdigGroupMapping(),
 
 			"sysdig_secure_policy":                         resourceSysdigSecurePolicy(),
 			"sysdig_secure_notification_channel_email":     resourceSysdigSecureNotificationChannelEmail(),