iamtf

The IAM.tf terreaform plugin allows you to manage identity appliances and appliance elements as terraform resources in a IAM.tf server.

main.tf

terraform {
  required_providers {
    iamtf = {
      version = "~> 0.6.0"
      source  = "atricore/iamtf"
    }
  }
}

You can configure the plugin directly in your terraform descriptor, as follows.

provider.tf

provider "iamtf" {
  org_name      = "my company"
  endpoint      = "http://localhost:8081/atricore-rest/services"
  client_id     = "idbus-f2f7244e-bbce-44ca-8b33-f5c0bde339f7"
  client_secret = "changeme"
}

You can also use environment valirables, and set minimun configuration in your plugin descriptor:

export JOSSO_API_CLIENT_ID=idbus-f2f7244e-bbce-44ca-8b33-f5c0bde339f7
export JOSSO_API_CLIENT_SECRET=changeme
export JOSSO_API_ENDPOINT=http://localhost:8081/atricore-rest/services
provider "iamtf" {
    org_name = "my company"
}

client_id

client identifier used to connect to the JOSSO server. Supports configuration from environment variable JOSSO_API_CLIENT_ID

  • type: String
  • optional: true

client_secret

Secret used to connect to the JOSSO server. Supports configuration from environment variable JOSSO_API_SECRET

  • type: String
  • optional: true

endpoint

JOSSO Server endpoint, for example: http://localhost:8081/atricore-rest/services/iam-deploy. Supports configuration from environment variable JOSSO_API_ENDPOINT

  • type: String
  • optional: true

import_ida

Name of the identity appliance used when importing resources. Supports configuration from environment variable JOSSO_API_APPLIANCE

  • type: String
  • optional: true

org_name

Organization using JOSSO. Supports configuration from environment variable JOSSO_ORG_NAME

  • type: String
  • optional: true

trace

Trace API traffic (See also TF_LOG and TF_PROVIDER_LOG). Supports configuration from environment variable JOSSO_API_TRACE

  • type: Bool
  • optional: true
Last Updated:
Contributors: Sebastian