feat(sso): add group mapping, settings, and global settings resources#698
Merged
tembleking merged 3 commits intomasterfrom Feb 10, 2026
Merged
feat(sso): add group mapping, settings, and global settings resources#698tembleking merged 3 commits intomasterfrom
tembleking merged 3 commits intomasterfrom
Conversation
…tings, and sysdig_sso_global_settings resources (#694) Add three new SSO resources using the Platform API (/platform/v1/) to replace the legacy group mapping resources that use /api/groupmappings: - sysdig_sso_group_mapping: manages SSO group-to-team mappings with support for standard and custom team roles, admin flag, and weighted priority - sysdig_sso_group_mapping_settings: singleton resource for configuring no-mapping and role-conflict strategies - sysdig_sso_global_settings: per-product singleton for enabling/disabling password login alongside SSO Deprecates sysdig_group_mapping and sysdig_group_mapping_config in favor of the new platform API resources.
Contributor
There was a problem hiding this comment.
Pull request overview
This PR introduces three new SSO-related Terraform resources that use Sysdig's Platform API (/platform/v1) while deprecating their legacy counterparts. The resources enable management of SSO group mappings, conflict resolution settings, and password login configuration.
Changes:
- Added
sysdig_sso_group_mappingresource for mapping SSO groups to teams with role assignments - Added
sysdig_sso_group_mapping_settingssingleton resource for configuring no-mapping and role-conflict resolution strategies - Added
sysdig_sso_global_settingsper-product singleton for password login enablement - Deprecated legacy
sysdig_group_mappingandsysdig_group_mapping_configresources with migration guidance
Reviewed changes
Copilot reviewed 17 out of 17 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| sysdig/provider.go | Registers the three new SSO resources in the provider |
| sysdig/resource_sysdig_sso_group_mapping.go | Implements SSO group mapping resource with CRUD operations |
| sysdig/resource_sysdig_sso_group_mapping_settings.go | Implements singleton settings resource for conflict resolution |
| sysdig/resource_sysdig_sso_global_settings.go | Implements per-product singleton for password login settings |
| sysdig/internal/client/v2/*.go | Adds client methods and models for Platform API endpoints |
| sysdig/resource_sysdig_group_mapping*.go | Adds deprecation messages to legacy resources |
| sysdig/*_test.go | Adds acceptance tests for all three new resources |
| website/docs/r/*.md | Provides documentation for the new resources |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Singleton resources must use resource.Test instead of resource.ParallelTest to avoid race conditions when multiple parallel tests modify the same global state.
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 17 out of 17 changed files in this pull request and generated 5 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
airadier
approved these changes
Feb 10, 2026
fcracker79
pushed a commit
that referenced
this pull request
Mar 5, 2026
…#698) ## Summary - Add `sysdig_sso_group_mapping` resource for managing SSO group-to-team mappings via Platform API (`/platform/v1/group-mappings`) - Add `sysdig_sso_group_mapping_settings` singleton resource for no-mapping and role-conflict strategies (`/platform/v1/group-mappings-settings`) - Add `sysdig_sso_global_settings` per-product singleton for password login configuration (`/platform/v1/global-sso-settings/{product}`) - Deprecate legacy `sysdig_group_mapping` and `sysdig_group_mapping_config` resources in favor of the new Platform API resources - Include acceptance tests and documentation for all three resources Closes #694
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
sysdig_sso_group_mappingresource for managing SSO group-to-team mappings via Platform API (/platform/v1/group-mappings)sysdig_sso_group_mapping_settingssingleton resource for no-mapping and role-conflict strategies (/platform/v1/group-mappings-settings)sysdig_sso_global_settingsper-product singleton for password login configuration (/platform/v1/global-sso-settings/{product})sysdig_group_mappingandsysdig_group_mapping_configresources in favor of the new Platform API resourcesCloses #694