Merge pull request #8 from enthought/add-permissions

Add organization team permission resource and data source

code_generator/provider_code_spec.json

@@ -164,7 +164,7 @@
             "name": "role",
             "string": {
               "computed_optional_required": "required",
-              "description": "Team permission. Should be admin, creator, or member.",
+              "description": "Team role. Should be admin, creator, or member.",
               "validators": [
                 {
                   "custom": {
@@ -182,6 +182,89 @@
         ]
       }
     },
+    {
+      "name": "organization_team_permission",
+      "schema": {
+        "attributes": [
+          {
+            "name": "orgname",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Organization name",
+              "plan_modifiers": [
+                {
+                  "custom": {
+                    "imports": [
+                      {
+                        "path": "github.com/hashicorp/terraform-plugin-framework/resource/schema/stringplanmodifier"
+                      }
+                    ],
+                    "schema_definition": "stringplanmodifier.RequiresReplace()"
+                  }
+                }
+              ]
+            }
+          },
+          {
+            "name": "reponame",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Repository name",
+              "plan_modifiers": [
+                {
+                  "custom": {
+                    "imports": [
+                      {
+                        "path": "github.com/hashicorp/terraform-plugin-framework/resource/schema/stringplanmodifier"
+                      }
+                    ],
+                    "schema_definition": "stringplanmodifier.RequiresReplace()"
+                  }
+                }
+              ]
+            }
+          },
+          {
+            "name": "teamname",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Team name",
+              "plan_modifiers": [
+                {
+                  "custom": {
+                    "imports": [
+                      {
+                        "path": "github.com/hashicorp/terraform-plugin-framework/resource/schema/stringplanmodifier"
+                      }
+                    ],
+                    "schema_definition": "stringplanmodifier.RequiresReplace()"
+                  }
+                }
+              ]
+            }
+          },
+          {
+            "name": "permission",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Team permission. Should be read, write or admin.",
+              "validators": [
+                {
+                  "custom": {
+                    "imports": [
+                      {
+                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
+                      }
+                    ],
+                    "schema_definition": "stringvalidator.OneOf([]string{\"read\", \"write\", \"admin\"}...)"
+                  }
+                }
+              ]
+            }
+          }
+        ]
+      }
+    },
     {
       "name": "repository",
       "schema": {
@@ -282,6 +365,41 @@
         ]
       }
     },
+    {
+      "name": "organization_team_permission",
+      "schema": {
+        "attributes": [
+          {
+            "name": "orgname",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Organization name"
+            }
+          },
+          {
+            "name": "reponame",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Repository name"
+            }
+          },
+          {
+            "name": "teamname",
+            "string": {
+              "computed_optional_required": "required",
+              "description": "Team name"
+            }
+          },
+          {
+            "name": "permission",
+            "string": {
+              "computed_optional_required": "computed",
+              "description": "Team permission"
+            }
+          }
+        ]
+      }
+    },
     {
       "name": "repository",
       "schema": {

docs/data-sources/organization_team_permission.md

@@ -0,0 +1,50 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "quay_organization_team_permission Data Source - quay"
+subcategory: ""
+description: |-
+  
+---
+
+# quay_organization_team_permission (Data Source)
+
+
+
+## Example Usage
+
+```terraform
+resource "quay_organization" "org" {
+  name  = "org"
+  email = "[email protected]"
+}
+
+resource "quay_repository" "repo" {
+  name      = "repo"
+  namespace = quay_organization.org.name
+}
+
+resource "quay_organization_team" "team" {
+  name    = "team"
+  orgname = quay_organization.org.name
+  role    = "member"
+}
+
+data "quay_organization_team_permission" "permission" {
+  orgname  = quay_organization.org.name
+  reponame = quay_repository.repo.name
+  teamname = quay_organization_team.team.name
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `orgname` (String) Organization name
+- `reponame` (String) Repository name
+- `teamname` (String) Team name
+
+### Read-Only
+
+- `permission` (String) Team permission

docs/resources/organization_team.md

@@ -40,7 +40,7 @@ resource "quay_organization_team" "admin" {
 
 - `name` (String) Team name
 - `orgname` (String) Organization name
-- `role` (String) Team permission. Should be admin, creator, or member.
+- `role` (String) Team role. Should be admin, creator, or member.
 
 ### Optional
 

docs/resources/organization_team_permission.md

@@ -0,0 +1,57 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "quay_organization_team_permission Resource - quay"
+subcategory: ""
+description: |-
+  
+---
+
+# quay_organization_team_permission (Resource)
+
+
+
+## Example Usage
+
+```terraform
+resource "quay_organization" "org" {
+  name  = "org"
+  email = "[email protected]"
+}
+
+resource "quay_repository" "repo" {
+  name      = "repo"
+  namespace = quay_organization.org.name
+}
+
+resource "quay_organization_team" "team" {
+  name    = "team"
+  orgname = quay_organization.org.name
+  role    = "member"
+}
+
+resource "quay_organization_team_permission" "permission" {
+  orgname    = quay_organization.org.name
+  reponame   = quay_repository.repo.name
+  teamname   = quay_organization_team.team.name
+  permission = "read"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `orgname` (String) Organization name
+- `permission` (String) Team permission. Should be read, write or admin.
+- `reponame` (String) Repository name
+- `teamname` (String) Team name
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# An organization team permission can be imported using the corresponding organization, repository and team name.
+terraform import quay_organization_team_permission.permission org repo team
+```

examples/data-sources/quay_organization_team_permission/data-source.tf

@@ -0,0 +1,21 @@
+resource "quay_organization" "org" {
+  name  = "org"
+  email = "[email protected]"
+}
+
+resource "quay_repository" "repo" {
+  name      = "repo"
+  namespace = quay_organization.org.name
+}
+
+resource "quay_organization_team" "team" {
+  name    = "team"
+  orgname = quay_organization.org.name
+  role    = "member"
+}
+
+data "quay_organization_team_permission" "permission" {
+  orgname  = quay_organization.org.name
+  reponame = quay_repository.repo.name
+  teamname = quay_organization_team.team.name
+}

examples/resources/quay_organization_team_permission/import.sh

@@ -0,0 +1,2 @@
+# An organization team permission can be imported using the corresponding organization, repository and team name.
+terraform import quay_organization_team_permission.permission org repo team

examples/resources/quay_organization_team_permission/resource.tf

@@ -0,0 +1,22 @@
+resource "quay_organization" "org" {
+  name  = "org"
+  email = "[email protected]"
+}
+
+resource "quay_repository" "repo" {
+  name      = "repo"
+  namespace = quay_organization.org.name
+}
+
+resource "quay_organization_team" "team" {
+  name    = "team"
+  orgname = quay_organization.org.name
+  role    = "member"
+}
+
+resource "quay_organization_team_permission" "permission" {
+  orgname    = quay_organization.org.name
+  reponame   = quay_repository.repo.name
+  teamname   = quay_organization_team.team.name
+  permission = "read"
+}