resource_github_team_membership.go

package github

import (
	"context"
	"errors"
	"log"
	"net/http"
	"strconv"

	"github.com/google/go-github/v85/github"
	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
)

func resourceGithubTeamMembership() *schema.Resource {
	return &schema.Resource{
		CreateContext: resourceGithubTeamMembershipCreateOrUpdate,
		ReadContext:   resourceGithubTeamMembershipRead,
		UpdateContext: resourceGithubTeamMembershipCreateOrUpdate,
		DeleteContext: resourceGithubTeamMembershipDelete,
		Importer: &schema.ResourceImporter{
			StateContext: func(ctx context.Context, d *schema.ResourceData, m any) ([]*schema.ResourceData, error) {
				meta := m.(*Owner)
				teamIdString, username, err := parseTwoPartID(d.Id(), "team_id", "username")
				if err != nil {
					return nil, err
				}

				teamId, err := getTeamID(ctx, meta, teamIdString)
				if err != nil {
					return nil, err
				}

				d.SetId(buildTwoPartID(strconv.FormatInt(teamId, 10), username))
				return []*schema.ResourceData{d}, nil
			},
		},

		Schema: map[string]*schema.Schema{
			"team_id": {
				Type:        schema.TypeString,
				Required:    true,
				ForceNew:    true,
				Description: "The GitHub team id or the GitHub team slug.",
			},
			"username": {
				Type:             schema.TypeString,
				Required:         true,
				ForceNew:         true,
				DiffSuppressFunc: caseInsensitive(),
				Description:      "The user to add to the team.",
			},
			"role": {
				Type:             schema.TypeString,
				Optional:         true,
				Default:          "member",
				Description:      "The role of the user within the team. Must be one of 'member' or 'maintainer'.",
				ValidateDiagFunc: validateValueFunc([]string{"member", "maintainer"}),
			},
			"etag": {
				Type:     schema.TypeString,
				Computed: true,
			},
			"user_id": {
				Type:        schema.TypeString,
				Computed:    true,
				Description: "The ID of the user, used to resolve the current username before membership updates in case the username changed (e.g. suspended EMU users).",
			},
		},
	}
}

func resourceGithubTeamMembershipCreateOrUpdate(ctx context.Context, d *schema.ResourceData, m any) diag.Diagnostics {
	meta := m.(*Owner)
	client := meta.v3client
	orgId := meta.id

	teamIdString := d.Get("team_id").(string)
	teamId, err := getTeamID(ctx, meta, teamIdString)
	if err != nil {
		return diag.FromErr(err)
	}

	username := d.Get("username").(string)
	role := d.Get("role").(string)

	_, _, err = client.Teams.AddTeamMembershipByID(ctx,
		orgId,
		teamId,
		username,
		&github.TeamAddTeamMembershipOptions{
			Role: role,
		},
	)
	if err != nil {
		return diag.FromErr(err)
	}

	d.SetId(buildTwoPartID(teamIdString, username))

	return resourceGithubTeamMembershipRead(ctx, d, meta)
}

func resourceGithubTeamMembershipRead(ctx context.Context, d *schema.ResourceData, m any) diag.Diagnostics {
	meta := m.(*Owner)
	client := meta.v3client
	orgId := meta.id

	teamIdString, username, err := parseTwoPartID(d.Id(), "team_id", "username")
	if err != nil {
		return diag.FromErr(err)
	}

	teamId, err := getTeamID(ctx, meta, teamIdString)
	if err != nil {
		return diag.FromErr(err)
	}

	// We intentionally set these early to allow reconciliation
	// from an upstream bug which emptied team_id in state
	// See https://github.com/integrations/terraform-provider-github/issues/323
	if err = d.Set("team_id", teamIdString); err != nil {
		return diag.FromErr(err)
	}
	if err = d.Set("username", username); err != nil {
		return diag.FromErr(err)
	}

	if !d.IsNewResource() {
		ctx = context.WithValue(ctx, ctxEtag, d.Get("etag").(string))
	}

	membership, resp, err := client.Teams.GetTeamMembershipByID(ctx,
		orgId, teamId, username)
	if err != nil {
		var ghErr *github.ErrorResponse
		if errors.As(err, &ghErr) {
			if ghErr.Response.StatusCode == http.StatusNotModified {
				return nil
			}
			if ghErr.Response.StatusCode == http.StatusNotFound {
				log.Printf("[INFO] Removing team membership %s from state because it no longer exists in GitHub",
					d.Id())
				d.SetId("")
				return nil
			}
		}
		return diag.FromErr(err)
	}

	if err = d.Set("etag", resp.Header.Get("ETag")); err != nil {
		return diag.FromErr(err)
	}
	if err = d.Set("role", membership.GetRole()); err != nil {
		return diag.FromErr(err)
	}

	user, _, err := client.Users.Get(ctx, username)
	if err == nil {
		if err = d.Set("user_id", strconv.FormatInt(user.GetID(), 10)); err != nil {
			return diag.FromErr(err)
		}
	}

	return nil
}

func resourceGithubTeamMembershipDelete(ctx context.Context, d *schema.ResourceData, m any) diag.Diagnostics {
	meta := m.(*Owner)
	client := meta.v3client
	orgId := meta.id

	teamIdString := d.Get("team_id").(string)
	teamId, err := getTeamID(ctx, meta, teamIdString)
	if err != nil {
		return diag.FromErr(err)
	}

	username := resolveUsernameByID(ctx, client, d.Get("user_id").(string), d.Get("username").(string))

	_, err = client.Teams.RemoveTeamMembershipByID(ctx, orgId, teamId, username)
	if err != nil {
		return diag.FromErr(err)
	}

	return nil
}