Manage HCP organization settings

[tmatilai]

Description

It would be great to be able to manage most if not all of the HCP settings with Terraform. At least the IAM and SSO configurations are missing at the moment.

For SSO, maybe something similar to the aws_acm_certificate_validation resource could be useful for the validation. But even data sources to get the SAML variables would be an improvement.

This of course assumes that the underlying API and SDK have the needed endpoints.

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[itsjaspermilan]

Hey! Thanks for your enhancement suggestion to the Terraform Provider! I've sent this request to the appropriate internal team and they'll take it into consideration. 😄

[tmatilai]

Hi! 👋

Are there any news on this? It seems to me that even the HCP API is not publicly documented, so it's hard to contribute to the SDK and provider.

Maybe the Service Principals and their keys (for org and project) could be an easier start? If the SDK added support for it, I volunteer to help implementing the resources and data sources here.

[tmatilai]

🙌 More wishes:

• hcp_organization data source for fetching the organization ID (especially with browser auth)
• hcp_project resource
• hcp_project data source which would allow fetching project based on ID or name, defaulting to the default one
• hcp_projects data source to fetch all the project IDs, including the default

[F21]

It seems the ability to manage HCP organizations has been implemented in hcp-sdk-go: https://github.com/hashicorp/hcp-sdk-go/tree/main/clients/cloud-iam/stable/2019-12-10, so it should be possible to implement most of the features in this issue.

[tmatilai]

The hcp_service_principal resource and data source seem to have been released in v0.74.0. Thanks! 🎉

[tmatilai]

And hcp_project and hcp_organization in v0.73.0 🎉

I think the SSO configuration is still missing, but these already make my life easier. 🤗