Compare commits

...

4 Commits

Author SHA1 Message Date
Doris Ruppert dadd5e2b5b OPMAAS-4486 corrected spelling errors, added examples for groups with permissions 2023-07-14 11:05:06 +02:00
Doris Ruppert b8f36af95d OPMAAS-4486 added json examples for several roles in CN 2023-07-13 17:46:13 +02:00
Doris Ruppert 8237b21231 OPMAAS-4486 added cross-product view CN 2023-07-12 17:48:34 +02:00
Doris Ruppert 4cbb38baf5 OPMAAS-4486 set up example for SaaS and Managed 2023-07-12 17:19:48 +02:00
17 changed files with 343 additions and 0 deletions

View File

@ -0,0 +1,32 @@
{
"levelType": "environment",
"levelId": "ab88c03b-b7fc-45f0-9115-9e9ecc0ced35",
"policyBindings": [
{
"policyUuid": "32ab8b21-6e97-4d85-95eb-635bb771a4fd",
"groups": [
"dtappcococonnectedcallservicescnview",
"dtappcococonnectedcallservicescnchangelocals"
]
},
{
"policyUuid": "af9add43-1ef1-4653-984e-fdde3b9964ba",
"groups": [
"dtappcococonnectedcallservicescnview",
"dtappcococonnectedcallservicescnchangelocals"
]
},
{
"policyUuid": "cd28ffde-77fb-44d7-85fc-94a876660d59",
"groups": [
"dtappcococonnectedcallservicescnchangelocals"
]
},
{
"policyUuid": "665e7a5c-4ed1-44de-9f8d-d0ce10fe0de0",
"groups": [
"dtappcococonnectedcallservicescnchangelocals"
]
}
]
}

View File

@ -0,0 +1,32 @@
{
"levelType": "environment",
"levelId": "b921f1b9-c00e-4031-b9d1-f5a0d530757b",
"policyBindings": [
{
"policyUuid": "32ab8b21-6e97-4d85-95eb-635bb771a4fd",
"groups": [
"dtappcococonnectedcallservicescnview",
"dtappcococonnectedcallservicescnchangelocals"
]
},
{
"policyUuid": "af9add43-1ef1-4653-984e-fdde3b9964ba",
"groups": [
"dtappcococonnectedcallservicescnview",
"dtappcococonnectedcallservicescnchangelocals"
]
},
{
"policyUuid": "cd28ffde-77fb-44d7-85fc-94a876660d59",
"groups": [
"dtappcococonnectedcallservicescnchangelocals"
]
},
{
"policyUuid": "665e7a5c-4ed1-44de-9f8d-d0ce10fe0de0",
"groups": [
"dtappcococonnectedcallservicescnchangelocals"
]
}
]
}

View File

@ -0,0 +1,12 @@
{
"isClusterAdminGroup": false,
"isManageAccount": false,
"isAccessAccount": false,
"id": "dtappcococonnectedcallservicescnchangelocals",
"name": "DT_APP_CoCo_ConnectedCallServices_CN_Change_locals",
"ldapGroupNames": [
"Connected Call Services - CN Change locals"
],
"ssoGroupNames": [],
"accessRight": {}
}

View File

@ -0,0 +1,29 @@
{
"groupId": "dtappcococonnectedcallservicescnchangelocals",
"mzPermissionsPerEnvironment": [
{
"environmentUuid": "b921f1b9-c00e-4031-b9d1-f5a0d530757b",
"mzPermissions": [
{
"mzId": "-5295932427366417022",
"permissions": [
"VIEWER",
"MANAGE_SETTINGS"
]
}
]
},
{
"environmentUuid": "ab88c03b-b7fc-45f0-9115-9e9ecc0ced35",
"mzPermissions": [
{
"mzId": "3609016845412481885",
"permissions": [
"VIEWER",
"MANAGE_SETTINGS"
]
}
]
}
]
}

View File

@ -0,0 +1,13 @@
{
"isClusterAdminGroup": false,
"isAccessAccount": false,
"isManageAccount": false,
"id": "dtappcococonnectedcallservicescnview",
"name": "DT_APP_CoCo_ConnectedCallServices_CN_View",
"ldapGroupNames": [
"Connected Call Services - China View"
],
"ssoGroupNames": [],
"accessRight": {
}
}

View File

@ -0,0 +1,10 @@
resource "dynatrace_user_group" "DT_APP_CoCo_ConnectedCallServices_CN_View" {
name = "DT_APP_CoCo_ConnectedCallServices_CN_View"
ldap_groups = [ "Connected Call Services - China View" ]
permissions {
grant {
permission = "VIEWER"
}
}
}

View File

@ -0,0 +1,27 @@
{
"groupId": "dtappcococonnectedcallservicescnview",
"mzPermissionsPerEnvironment": [
{
"environmentUuid": "b921f1b9-c00e-4031-b9d1-f5a0d530757b",
"mzPermissions": [
{
"mzId": "-5295932427366417022",
"permissions": [
"VIEWER"
]
}
]
},
{
"environmentUuid": "ab88c03b-b7fc-45f0-9115-9e9ecc0ced35",
"mzPermissions": [
{
"mzId": "3609016845412481885",
"permissions": [
"VIEWER"
]
}
]
}
]
}

View File

@ -0,0 +1,17 @@
{
"isClusterAdminGroup": false,
"isAccessAccount": false,
"isManageAccount": false,
"id": "dtenvcococnview",
"name": "DT_ENV_CoCo_CN_View",
"ldapGroupNames": [
"Cross-Product View - China"
],
"ssoGroupNames": [],
"accessRight": {
"VIEWER": [
"ab88c03b-b7fc-45f0-9115-9e9ecc0ced35",
"b921f1b9-c00e-4031-b9d1-f5a0d530757b"
]
}
}

View File

@ -0,0 +1,11 @@
resource "dynatrace_user_group" "DT_ENV_CoCo_CN_View" {
name = "DT_ENV_CoCo_CN_View"
ldap_groups = [ "Cross-Product View - China" ]
permissions {
grant {
environments = ["b921f1b9-c00e-4031-b9d1-f5a0d530757b", "ab88c03b-b7fc-45f0-9115-9e9ecc0ced35"]
permission = "VIEWER"
}
}
}

30
CN/user_groups/__main.tf Normal file
View File

@ -0,0 +1,30 @@
terraform {
required_providers {
dynatrace = {
version = ">=1.35.2"
source = "dynatrace-oss/dynatrace"
}
}
backend "s3" {
bucket = "coco-dynatrace-tfstate-prod"
key = "CN/user_groups/terraform.tfstate"
region = "eu-central-1"
dynamodb_table = "coco-dynatrace-tfstate"
encrypt = true
skip_credentials_validation = true
}
}
variable CN_PROD_ENV_URL {}
variable CN_PROD_API_TOKEN {}
provider "dynatrace" {
dt_env_url = "${var.CN_PROD_ENV_URL}"
dt_api_token = "${var.CN_PROD_API_TOKEN}"
dt_cluster_url = "https://dynatracemgd-tsp.bmwgroup.net"
dt_cluster_api_token = "dt0c01.QDWLIJVYSCCEOQ4VZYWYOUPF.YUXE5PT7COKAOIVNKS3S5NMMX7ZC4M3RAWVQ6OAZRSNUNOR2H5JQFJPVYRVSSWQ6"
}

View File

@ -0,0 +1,28 @@
resource "dynatrace_iam_group" "DT_APP_CoCo_ConnectedCallServices_EMEA-NA_View" {
name = "DT_APP_CoCo_ConnectedCallServices_EMEA-NA_View"
description = "Connected Call Services - EMEA NA View (preprod und prod)"
federated_attribute_values = [ "Connected Call Services - EMEA NA View" ]
permissions {
permission {
name = "tenant-viewer"
type = "management-zone"
scope = "qqk70169:-7397798385772720776"
}
permission {
name = "tenant-viewer"
type = "management-zone"
scope = "xxu26128:-4112886493107181463"
}
permission {
name = "tenant-viewer"
type = "management-zone"
scope = "onb44935:-7026069985839972400"
}
permission {
name = "tenant-viewer"
type = "management-zone"
scope = "wgv50241:5889520147495275218"
}
}
}

View File

@ -0,0 +1,28 @@
resource "dynatrace_iam_group" "DT_ENV_CoCo_EMEA-NA_View" {
name = "DT_ENV_CoCo_EMEA-NA_View"
description = "Cross-Product View - EMEA NA (preprod und prod)"
federated_attribute_values = [ "Cross-Product View - EMEA NA" ]
permissions {
permission {
name = "tenant-viewer"
type = "tenant"
scope = "qqk70169"
}
permission {
name = "tenant-viewer"
type = "tenant"
scope = "xxu26128"
}
permission {
name = "tenant-viewer"
type = "tenant"
scope = "onb44935"
}
permission {
name = "tenant-viewer"
type = "tenant"
scope = "wgv50241"
}
}
}

View File

@ -0,0 +1,30 @@
terraform {
required_providers {
dynatrace = {
version = ">=1.35.2"
source = "dynatrace-oss/dynatrace"
}
}
backend "s3" {
bucket = "coco-dynatrace-tfstate-prod"
key = "EMEA-NA/user_groups/terraform.tfstate"
region = "eu-central-1"
dynamodb_table = "coco-dynatrace-tfstate"
encrypt = true
}
}
variable EMEA_PROD_ENV_URL {}
variable EMEA_PROD_API_TOKEN {}
provider "dynatrace" {
dt_env_url = "${var.EMEA_PROD_ENV_URL}"
dt_api_token = "${var.EMEA_PROD_API_TOKEN}"
iam_client_id = "dt0s02.NL3JU7BN"
iam_account_id = "0d209e1f-8c3b-46b5-8437-aeca260ef22f"
iam_client_secret = "dt0s02.NL3JU7BN.ZAOPQRTISHJYJVBAHIJU5WKANFURBBU2YLQFBPFVNELALWMA47AELPPZ5KDXHR4W"
}

View File

@ -0,0 +1,7 @@
## --- variables
# IAM user group Variables
variable groupName {default = ""}
variable permissionName {default = "tenant-viewer"}
variable environment-id {default = ""}
variable managementzone-id {default = ""}

View File

@ -0,0 +1,16 @@
terraform {
required_providers {
dynatrace = {
version = "1.35.2"
source = "dynatrace-oss/dynatrace"
}
}
}
resource dynatrace_iam_group main {
permission {
name = "${var.groupName}"
type = "management-zone"
scope = "${var.environment-id}" + ":" + "${var. managementzone-id}"
}
}

View File

@ -0,0 +1,7 @@
## --- variables
# IAM user group Variables
variable groupName {default = ""}
variable permissionName {default = "tenant-viewer"}
variable environment-id {default = ""}
variable managementzone-id {default = ""}

View File

@ -0,0 +1,14 @@
terraform {
required_providers {
dynatrace = {
version = "1.35.2"
source = "dynatrace-oss/dynatrace"
}
}
}
resource dynatrace_user_group main {
permission {
name = "${var.groupName}"
}
}