Feature Request: okta_admin_role_custom data source

[sgal-dm]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Add a data source for the okta_admin_role_custom resource so custom role use can be decoupled from creation.

New or Affected Resource(s)

• data.okta_admin_role_custom

Potential Terraform Configuration

# New date source
data "okta_admin_role_custom" "my_role" {
  label = "MY_ROLE"
}

resource "okta_resource_set" "my_app" {
  label       = "My App Resources"
  description = "Resources associated with My App"
  resources   = [...]
}

resource "okta_group" "my_app_admins" {
  name        = "My App Admins"
  description = "Users with the My Role role for resources associated with My App."
}

resource "okta_admin_role_custom_assignments" "my_app_admins" {
  custom_role_id  = data.okta_admin_role_custom.my_role.id # << Consume new data source.
  members         = ["https://acme.okta.com/api/v1/groups${okta_group.my_app_admins.id}"]
  resource_set_id = okta_resource_set.my_app.id
}

References

• Based on the API documentation the Get Role call supports retrieving a role by its label attribute, so this should be possible without any changes to the underlying API.

[monde]

Thanks @sgal-dm , agreed, the data source for okta_admin_role_custom would be useful for the operator. We'll get this feature enhancement on to our backlog.

[monde]

Okta internal reference: https://oktainc.atlassian.net/browse/OKTA-601994

[github-actions[bot]]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days

[sgal-dm]

Not stale.

[github-actions[bot]]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days

[sgal-dm]

Not stale

[tdekoning93]

Is there any ETA for this?