team.tf

terraform {
  required_providers {
    octopusdeploy = { source = "OctopusDeployLabs/octopusdeploy", version = "0.21.5" }
  }
}


provider "octopusdeploy" {
  address  = "${var.octopus_server}"
  api_key  = "${var.octopus_apikey}"
  space_id = "${var.octopus_space_id}"
}

variable "octopus_server" {
  type        = string
  nullable    = false
  sensitive   = false
  description = "The URL of the Octopus server e.g. https://myinstance.octopus.app."
}
variable "octopus_apikey" {
  type        = string
  nullable    = false
  sensitive   = true
  description = "The API key used to access the Octopus server. See https://octopus.com/docs/octopus-rest-api/how-to-create-an-api-key for details on creating an API key."
}
variable "octopus_space_id" {
  type        = string
  nullable    = false
  sensitive   = false
  description = "The space ID to populate"
}

resource "octopusdeploy_user_role" "copilotrole" {
  can_be_deleted = true
  description    = "A read only role used by the copilot service account."
  granted_space_permissions = [
    "AccountView", "ActionTemplateView", "ArtifactView", "CertificateView", "DeploymentView", "EnvironmentView",
    "EventView", "FeedView", "GitCredentialView", "InsightsReportView", "InterruptionView", "LibraryVariableSetView",
    "LifecycleView", "MachinePolicyView", "MachineView", "ProcessView", "ProjectGroupView", "ProjectView", "ProxyView",
    "ReleaseView", "RunbookRunView", "RunbookView", "SubscriptionView", "TaskView", "TeamView", "TenantView",
    "TriggerView", "VariableView", "VariableViewUnscoped", "WorkerView"
  ]
  granted_system_permissions = []
  name = "Copilot"
  space_permission_descriptions = []
}

resource "octopusdeploy_user" "copilot" {
  display_name  = "Copilot"
  email_address = "a@example.org"
  is_active     = true
  is_service    = true
  username      = "copilot"
}

resource "octopusdeploy_team" "copilot" {
  name = "Copilot"
  users = [octopusdeploy_user.copilot.id]
  user_role {
    space_id     = var.octopus_space_id
    user_role_id = octopusdeploy_user_role.copilotrole.id
  }
}