mark as experimental

Author: rubenhoenle

docs/resources/secretsmanager_instance_role_binding.md

@@ -4,12 +4,15 @@ page_title: "stackit_secretsmanager_instance_role_binding Resource - stackit"
 subcategory: ""
 description: |-
   IAM role binding resource schema.
+  ~> This resource is part of the iam experiment and is likely going to undergo significant changes or be removed in the future. Use it at your own discretion.
 ---
 
 # stackit_secretsmanager_instance_role_binding (Resource)
 
 IAM role binding resource schema.
 
+~> This resource is part of the iam experiment and is likely going to undergo significant changes or be removed in the future. Use it at your own discretion.
+
 ## Example Usage
 
 ```terraform

docs/resources/secretsmanager_secret_group_role_binding.md

@@ -4,12 +4,15 @@ page_title: "stackit_secretsmanager_secret_group_role_binding Resource - stackit
 subcategory: ""
 description: |-
   IAM role binding resource schema.
+  ~> This resource is part of the iam experiment and is likely going to undergo significant changes or be removed in the future. Use it at your own discretion.
 ---
 
 # stackit_secretsmanager_secret_group_role_binding (Resource)
 
 IAM role binding resource schema.
 
+~> This resource is part of the iam experiment and is likely going to undergo significant changes or be removed in the future. Use it at your own discretion.
+
 ## Example Usage
 
 ```terraform

stackit/internal/services/iam/rolebindings/generic/resource.go

@@ -84,7 +84,7 @@ func (r *RoleBindingResource[C]) Configure(ctx context.Context, req resource.Con
 // Schema defines the schema for the resource.
 func (r *RoleBindingResource[C]) Schema(_ context.Context, _ resource.SchemaRequest, resp *resource.SchemaResponse) {
 	resp.Schema = schema.Schema{
-		Description: "IAM role binding resource schema.",
+		Description: features.AddExperimentDescription("IAM role binding resource schema.", features.IamExperiment, core.Resource),
 		Attributes: map[string]schema.Attribute{
 			"id": schema.StringAttribute{
 				Description: "Terraform's internal resource identifier. It is structured as \"`region`,`resource_id`,`role`,`subject`\".",

stackit/internal/services/iam/rolebindings/generic/resource_test.go

@@ -1,12 +1,18 @@
 package generic
 
 import (
+	"fmt"
 	"testing"
 
+	"github.com/google/uuid"
+	"github.com/hashicorp/terraform-plugin-framework/types"
 	secretsmanagerV1Alpha "github.com/stackitcloud/stackit-sdk-go/services/secretsmanager/v1alphaapi"
 )
 
 func Test_mapFields(t *testing.T) {
+	const testRegion = "eu01"
+	resourceId := uuid.New().String()
+
 	type args struct {
 		resp   GenericRoleBindingResponse
 		model  *Model
@@ -19,10 +25,23 @@ func Test_mapFields(t *testing.T) {
 		wantErr   bool
 	}{
 		{
-			name: "success",
+			name: "default",
 			args: args{
-				resp:  &secretsmanagerV1Alpha.RoleBinding{},
-				model: &Model{},
+				region: testRegion,
+				resp: &secretsmanagerV1Alpha.RoleBinding{
+					Role:    "owner",
+					Subject: "john.doe@example.com",
+				},
+				model: &Model{
+					ResourceId: types.StringValue(resourceId),
+				},
+			},
+			wantModel: &Model{
+				Id:         types.StringValue(fmt.Sprintf("%s,%s,owner,john.doe@example.com", testRegion, resourceId)),
+				ResourceId: types.StringValue(resourceId),
+				Role:       types.StringValue("owner"),
+				Subject:    types.StringValue("john.doe@example.com"),
+				Region:     types.StringValue(testRegion),
 			},
 			wantErr: false,
 		},