terraform-provider-okta/examples/resources/okta_group_rule/test_423_response_capture.tf at main · lambdal/terraform-provider-okta · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
resource "okta_group" "test" {
  name = "test_423_response_capture"
}

# Main group rule that should succeed
resource "okta_group_rule" "test" {
  name              = "test_423_response_capture"
  status            = "ACTIVE"
  group_assignments = [okta_group.test.id]
  expression_type   = "urn:okta:expression:1.0"
  expression_value  = "String.startsWith(user.firstName,\"andy\")"
}

# Additional rules that might trigger 423s but won't fail the test
resource "okta_group_rule" "concurrent1" {
  name              = "test_423_response_capture_concurrent1"
  status            = "ACTIVE"
  group_assignments = [okta_group.test.id]
  expression_type   = "urn:okta:expression:1.0"
  expression_value  = "String.startsWith(user.lastName,\"smith\")"
}

resource "okta_group_rule" "concurrent2" {
  name              = "test_423_response_capture_concurrent2"
  status            = "ACTIVE"
  group_assignments = [okta_group.test.id]
  expression_type   = "urn:okta:expression:1.0"
  expression_value  = "String.startsWith(user.email,\"test\")"
}

resource "okta_group_rule" "concurrent3" {
  name              = "test_423_response_capture_concurrent3"
  status            = "ACTIVE"
  group_assignments = [okta_group.test.id]
  expression_type   = "urn:okta:expression:1.0"
  expression_value  = "String.startsWith(user.department,\"engineering\")"
}

resource "okta_group_rule" "concurrent4" {
  name              = "test_423_response_capture_concurrent4"
  status            = "ACTIVE"
  group_assignments = [okta_group.test.id]
  expression_type   = "urn:okta:expression:1.0"
  expression_value  = "String.startsWith(user.title,\"developer\")"
}

resource "okta_group_rule" "concurrent5" {
  name              = "test_423_response_capture_concurrent5"
  status            = "ACTIVE"
  group_assignments = [okta_group.test.id]
  expression_type   = "urn:okta:expression:1.0"
  expression_value  = "String.startsWith(user.employeeNumber,\"123\")"
}