add resource 'api_token' and data source 'permission_groups'

cloudflare/data_source_api_token_permission_groups.go

@@ -0,0 +1,47 @@
+package cloudflare
+
+import (
+	"fmt"
+	"github.com/cloudflare/cloudflare-go"
+	"github.com/hashicorp/terraform-plugin-sdk/helper/schema"
+	"log"
+)
+
+func dataSourceCloudflareApiTokenPermissionGroups() *schema.Resource {
+	return &schema.Resource{
+		Read: dataSourceCloudflareApiTokenPermissionGroupsRead,
+
+		Schema: map[string]*schema.Schema{
+			"permissions": {
+				Computed: true,
+				Type:     schema.TypeMap,
+			},
+		},
+	}
+}
+
+func dataSourceCloudflareApiTokenPermissionGroupsRead(d *schema.ResourceData, meta interface{}) error {
+	log.Printf("[DEBUG] Reading API Token Permission Groups")
+	client := meta.(*cloudflare.API)
+
+	permissions, err := client.ListAPITokensPermissionGroups()
+	if err != nil {
+		return fmt.Errorf("error listing API Token Permission Groups: %s", err)
+	}
+
+	permissionDetails := make(map[string]interface{}, 0)
+	ids := []string{}
+	for _, v := range permissions {
+		permissionDetails[v.Name] = v.ID
+		ids = append(ids, v.ID)
+	}
+
+	err = d.Set("permissions", permissionDetails)
+	if err != nil {
+		return fmt.Errorf("error setting API Token Permission Groups: %s", err)
+	}
+
+	d.SetId(stringListChecksum(ids))
+
+	return nil
+}

cloudflare/data_source_api_token_permission_groups_test.go

@@ -0,0 +1,54 @@
+package cloudflare
+
+import (
+	"fmt"
+	"testing"
+
+	"github.com/hashicorp/terraform-plugin-sdk/helper/resource"
+	"github.com/hashicorp/terraform-plugin-sdk/terraform"
+)
+
+func TestAccCloudflareApiTokenPermissionGroups(t *testing.T) {
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:  func() { testAccPreCheck(t) },
+		Providers: testAccProviders,
+		Steps: []resource.TestStep{
+			{
+				Config: testAccCloudflareApiTokenPermissionGroupsConfig,
+				Check: resource.ComposeTestCheckFunc(
+					testAccCloudflareApiTokenPermissionGroups("data.cloudflare_api_token_permission_groups.some"),
+				),
+			},
+		},
+	})
+}
+
+func testAccCloudflareApiTokenPermissionGroups(n string) resource.TestCheckFunc {
+	return func(s *terraform.State) error {
+		r := s.RootModule().Resources[n]
+		a := r.Primary.Attributes
+
+		apiTokenReadId, ok := a["permissions.API Tokens Read"]
+		if !ok {
+			return fmt.Errorf("couldn't get 'API Tokens Read' permission ID")
+		}
+
+		// PermissionGroupsIDs can be found at
+		// https://developers.cloudflare.com/api/tokens/create/permissions
+		apiTokenReadIdShouldBe := "0cc3a61731504c89b99ec1be78b77aa"
+
+		if apiTokenReadId != apiTokenReadIdShouldBe {
+			return fmt.Errorf("ApiTokenPermissionGroups 'API Tokens Read' is '%s', but should be '%s'",
+				apiTokenReadId,
+				apiTokenReadIdShouldBe,
+			)
+		}
+
+		return nil
+	}
+}
+
+const testAccCloudflareApiTokenPermissionGroupsConfig = `
+data "cloudflare_api_token_permission_groups" "some" {}
+`

cloudflare/provider.go

@@ -94,11 +94,12 @@ func Provider() terraform.ResourceProvider {
 		},
 
 		DataSourcesMap: map[string]*schema.Resource{
-			"cloudflare_ip_ranges":    dataSourceCloudflareIPRanges(),
-			"cloudflare_waf_groups":   dataSourceCloudflareWAFGroups(),
-			"cloudflare_waf_packages": dataSourceCloudflareWAFPackages(),
-			"cloudflare_waf_rules":    dataSourceCloudflareWAFRules(),
-			"cloudflare_zones":        dataSourceCloudflareZones(),
+			"cloudflare_api_token_permission_groups": dataSourceCloudflareApiTokenPermissionGroups(),
+			"cloudflare_ip_ranges":                   dataSourceCloudflareIPRanges(),
+			"cloudflare_waf_groups":                  dataSourceCloudflareWAFGroups(),
+			"cloudflare_waf_packages":                dataSourceCloudflareWAFPackages(),
+			"cloudflare_waf_rules":                   dataSourceCloudflareWAFRules(),
+			"cloudflare_zones":                       dataSourceCloudflareZones(),
 		},
 
 		ResourcesMap: map[string]*schema.Resource{
@@ -109,6 +110,7 @@ func Provider() terraform.ResourceProvider {
 			"cloudflare_access_service_token":                   resourceCloudflareAccessServiceToken(),
 			"cloudflare_access_identity_provider":               resourceCloudflareAccessIdentityProvider(),
 			"cloudflare_account_member":                         resourceCloudflareAccountMember(),
+			"cloudflare_api_token":                              resourceCloudflareApiToken(),
 			"cloudflare_argo":                                   resourceCloudflareArgo(),
 			"cloudflare_authenticated_origin_pulls":             resourceCloudflareAuthenticatedOriginPulls(),
 			"cloudflare_authenticated_origin_pulls_certificate": resourceCloudflareAuthenticatedOriginPullsCertificate(),