confluentinc / terraform-provider-confluent

Terraform Provider for Confluent
Apache License 2.0
27 stars 63 forks source link

Documentation around identity pools and RBAC/ACLs is not clear #405

Open pwstorm opened 1 month ago

pwstorm commented 1 month ago

The documentation could be more clear that attaching role bindings or ACLs to identity pools requires specifying the id of the identity pool as a User in the principal field of the role binding or ACL resource, as mentioned in this issue: https://github.com/confluentinc/terraform-provider-confluent/issues/241

linouk23 commented 1 month ago

@pwstorm, thank you for creating the issue!

It seems like we have added an example to the Role Bindings documentation page:

resource "confluent_role_binding" "environment-example-rb-2" {
  principal   = "User:${confluent_identity_pool.test.id}"
  role_name   = "EnvironmentAdmin"
  crn_pattern = confluent_environment.stag.resource_name
}

We'll make sure to add a similar example to the ACLs documentation page.