Made role selection conditional instead of static

This commit is contained in:
Patrick de Ruiter 2022-01-13 13:08:23 +01:00
parent 01c5ffdd89
commit d95581959e

18
main.tf
View File

@ -3,7 +3,7 @@ locals {
#handle = var.handle #handle = var.handle
name = var.name name = var.name
roles = var.roles roles = var.roles
#admin = var.admin admin = var.admin
} }
data "datadog_role" "standard_role" { data "datadog_role" "standard_role" {
@ -11,29 +11,35 @@ data "datadog_role" "standard_role" {
} }
data "datadog_role" "admin_role" { data "datadog_role" "admin_role" {
count = var.admin ? 1 : 0
filter = "Datadog Admin Role" filter = "Datadog Admin Role"
} }
data "datadog_role" "readonly_role" { data "datadog_role" "readonly_role" {
count = var.admin ? 0 : 1
filter = "Datadog Read Only Role" filter = "Datadog Read Only Role"
} }
data "datadog_role" "sl-techops-role" { data "datadog_role" "sl-techops-role" {
count = var.admin ? 0 : 1
filter = "sl-techops-role" filter = "sl-techops-role"
} }
#resource "datadog_user" "add_datadog_user" {
# email = local.email
# name = local.name
# roles = [data.datadog_role.sl-techops-role.id]
#}
resource "datadog_user" "add_datadog_user" { resource "datadog_user" "add_datadog_user" {
email = local.email email = local.email
#handle = local.handle
name = local.name name = local.name
#admin = local.admin roles = var.admin ? data.datadog_role.sl-techops-role.id : data.datadog_role.admin_role.id
roles = [data.datadog_role.sl-techops-role.id]
} }
#resource "datadog_user" "add_datadog_admin_user" { #resource "datadog_user" "add_datadog_admin_user" {
# email = local.email # email = local.email
# #handle = local.handle
# name = local.name # name = local.name
# #admin = local.admin
# roles = [data.datadog_role.admin_role.id] # roles = [data.datadog_role.admin_role.id]
#} #}