Configuration of resources #7816

musicformellons · 2024-04-22T08:04:13Z

musicformellons
Apr 22, 2024

I'm looking for ways to create organization, project, users when (self-provisioning) spinning up zitadel (both on localdev and in private cloud). What is the best way to do this?

I managed to get some styling etc via 'zitadel-config.yaml' and 'steps.yaml'. Can I use these config files as well for creating such resources? Or do i need to do this via api-calls after creating the basic zitadel instance? I've looked around in the docs but don't find it. I do find e.g. terraform, but that does not work on localdev.

Answered by fforootd

Apr 22, 2024

We recommend that you create resources through the api or with an IAC tool like terraform.

I do find e.g. terraform, but that does not work on localdev.

What is the error you see?

View full answer

fforootd · 2024-04-22T08:22:49Z

fforootd
Apr 22, 2024
Maintainer

We recommend that you create resources through the api or with an IAC tool like terraform.

I do find e.g. terraform, but that does not work on localdev.

What is the error you see?

6 replies

fforootd Apr 22, 2024
Maintainer

Ah well the TF should also work in local scenarios 😁

Our TF prodiver is also built on the zitadel-go sdk so yeah it supports a lot of resources.

I think the rust sdk also works with the mgmt api... check this link here https://docs.rs/zitadel/latest/zitadel/api/clients/struct.ClientBuilder.html#method.build_management_client

musicformellons Apr 22, 2024
Author

Very nice, I'll try both terraform and the rust api then! Thx!

musicformellons Apr 23, 2024
Author

@fforootd I'm trying configure some resources using terraform. I'm using:

terraform {
  required_version = ">= 0.14.0"
  required_providers {
    zitadel = {
      source  = "zitadel/zitadel"
      version = "1.1.0"
    }
  }
}

provider "zitadel" {
  domain           = "localhost"
  insecure         = "true"
  port             = "8080"
  jwt_profile_json = <<EOF
    {
      "client_id": "zitadel-admin",
      "client_secret": "Password1!"
    }
EOF
}

resource "zitadel_org" "default" {
  name = "myorg"
}

data "zitadel_project" "default" {
  org_id     = data.zitadel_org.default.id
  project_id = "123456789012345678"
}

data "zitadel_org" "default" {
  id = "123456789012345678"
}

resource "zitadel_application_oidc" "default" {
  project_id = data.zitadel_project.default.id
  org_id     = data.zitadel_org.default.id

  name                        = "mytest"
  redirect_uris               = ["http://localhost:5173/auth/signinwin/zitadel"]
  response_types              = ["OIDC_RESPONSE_TYPE_CODE"]
  grant_types                 = ["OIDC_GRANT_TYPE_AUTHORIZATION_CODE", "OIDC_GRANT_TYPE_REFRESH_TOKEN"]
  post_logout_redirect_uris   = ["https://localhost:5137"]
  app_type                    = "OIDC_APP_TYPE_WEB"
  auth_method_type            = "OIDC_AUTH_METHOD_TYPE_NONE"
  version                     = "OIDC_VERSION_1_0"
  clock_skew                  = "0s"
  dev_mode                    = true
  access_token_type           = "OIDC_TOKEN_TYPE_BEARER"
  access_token_role_assertion = false
  id_token_role_assertion     = false
  id_token_userinfo_assertion = false
  additional_origins          = []
}

resource "zitadel_human_user" "default" {
  org_id             = data.zitadel_org.default.id
  user_name          = "[email protected]"
  first_name         = "my"
  last_name          = "user"
  nick_name          = "ricky"
  display_name       = "displayname"
  preferred_language = "nl"
  gender             = "GENDER_MALE"
  phone              = "+31799999999"
  is_phone_verified  = true
  email              = "[email protected]"
  is_email_verified  = true
  initial_password   = "Test@123"
}

But with terraform plan I run into:

Ξ environments/dev git:(main) ▶ terraform plan
data.zitadel_org.default: Reading...

Planning failed. Terraform encountered an error while generating this plan.

╷
│ Error: Request cancelled
│ 
│ The plugin6.(*GRPCProvider).PlanResourceChange request was cancelled.
╵
╷
│ Error: Plugin did not respond
│ 
│ The plugin encountered an error, and failed to respond to the plugin6.(*GRPCProvider).ReadDataSource call. The
│ plugin logs may contain more details.
╵

Stack trace from the terraform-provider-zitadel_v1.1.0 plugin:

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x6d14b0]

goroutine 98 [running]:
github.com/zitadel/oidc/pkg/crypto.BytesToPrivateKey({0x400073ad30?, 0x14566c?, 0x16?})
        github.com/zitadel/[email protected]/pkg/crypto/key.go:11 +0x20
github.com/zitadel/oidc/pkg/client.NewSignerFromPrivateKeyByte({0x400073ad30?, 0x40004c0ab0?, 0x400073aca8?}, {0x0, 0x0})
        github.com/zitadel/[email protected]/pkg/client/client.go:152 +0x28
github.com/zitadel/oidc/pkg/client/profile.NewJWTProfileTokenSource({0x400068c6f0, 0x15}, {0x0, 0x0}, {0x0?, 0x0?}, {0x400073ad30?, 0x1cf7d8?, 0x400073ad18?}, {0x4000537500, ...}, ...)
        github.com/zitadel/[email protected]/pkg/client/profile/jwt_profile.go:43 +0x5c
github.com/zitadel/oidc/pkg/client/profile.NewJWTProfileTokenSourceFromKeyFileData({0x400068c6f0, 0x15}, {0x4000115260?, 0xf10d4?, 0x4000064640?}, {0x4000537500, 0x2, 0x2}, {0x0, 0x0, ...})
        github.com/zitadel/[email protected]/pkg/client/profile/jwt_profile.go:39 +0xdc
github.com/zitadel/zitadel-go/v2/pkg/client/middleware.JWTProfileFromFileData.func1({0x400068c6f0?, 0x1bf94?}, {0x4000537500?, 0x18?, 0x18?})
        github.com/zitadel/zitadel-go/[email protected]/pkg/client/middleware/auth.go:35 +0x54
github.com/zitadel/zitadel-go/v2/pkg/client/middleware.NewAuthenticator({0x400068c6f0?, 0xbe9d20?}, 0x4000632480?, {0x4000537500?, 0xffff86a85258?, 0xffffade695b8?})
        github.com/zitadel/zitadel-go/[email protected]/pkg/client/middleware/auth.go:49 +0x38
github.com/zitadel/zitadel-go/v2/pkg/client/zitadel.(*Connection).setInterceptors(0x40004c0630, {0x400068c6f0?, 0x40004f7fa0?}, {0x0, 0x0}, {0x4000537500?, 0x400073af18?, 0x1bf94?}, 0x174c310?)
        github.com/zitadel/zitadel-go/[email protected]/pkg/client/zitadel/client.go:69 +0x4c
github.com/zitadel/zitadel-go/v2/pkg/client/zitadel.NewConnection({0x400068c6f0, 0x15}, {0x400059e840, 0xe}, {0x4000537500, 0x2, 0x2}, {0x40002c2440, 0x2, 0x835cb8?})
        github.com/zitadel/zitadel-go/[email protected]/pkg/client/zitadel/client.go:41 +0x17c
github.com/zitadel/zitadel-go/v2/pkg/client/admin.NewClient({0x400068c6f0?, 0x25?}, {0x400059e840?, 0x1?}, {0x4000537500?, 0x0?, 0x0?}, {0x40002c2440?, 0x0?, 0x0?})
        github.com/zitadel/zitadel-go/[email protected]/pkg/client/admin/client.go:14 +0x2c
github.com/zitadel/terraform-provider-zitadel/zitadel/helper.GetAdminClient(0x4000634720)
        github.com/zitadel/terraform-provider-zitadel/zitadel/helper/client.go:92 +0x1ac
github.com/zitadel/terraform-provider-zitadel/zitadel/org.get({0xe8cec8, 0x400076acc0}, 0x0?, {0x9c18a0?, 0x4000634720})
        github.com/zitadel/terraform-provider-zitadel/zitadel/org/funcs.go:112 +0x80
github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.(*Resource).read(0x400013a700, {0xe8cf00, 0x400076a720}, 0xd?, {0x9c18a0, 0x4000634720})
        github.com/hashicorp/terraform-plugin-sdk/[email protected]/helper/schema/resource.go:724 +0xe8
github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.(*Resource).ReadDataApply(0x400013a700, {0xe8cf00, 0x400076a720}, 0x400075ca00, {0x9c18a0, 0x4000634720})
        github.com/hashicorp/terraform-plugin-sdk/[email protected]/helper/schema/resource.go:943 +0x10c
github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.(*GRPCProviderServer).ReadDataSource(0x400000c018, {0xe8cf00?, 0x400076a5a0?}, 0x4000537400)
        github.com/hashicorp/terraform-plugin-sdk/[email protected]/helper/schema/grpc_provider.go:1195 +0x2f8
github.com/hashicorp/terraform-plugin-mux/tf5to6server.v5tov6Server.ReadDataSource({{0xe92748?, 0x400000c018?}}, {0xe8cf00?, 0x400076a5a0?}, 0x40005373e0?)
        github.com/hashicorp/[email protected]/tf5to6server/tf5to6server.go:94 +0x210
github.com/hashicorp/terraform-plugin-mux/tf6muxserver.muxServer.ReadDataSource({0x40000bea20, 0x40000bea80, {0x400001e7c0, 0x2, 0x2}, 0x40000bea50, 0x40001e8910, 0x40001e9aa0, 0x40000beab0}, {0xe8cf00?, ...}, ...)
        github.com/hashicorp/[email protected]/tf6muxserver/mux_server_ReadDataSource.go:27 +0x108
github.com/hashicorp/terraform-plugin-go/tfprotov6/tf6server.(*server).ReadDataSource(0x40000ceb40, {0xe8cf00?, 0x40007658c0?}, 0x40000b21e0)
        github.com/hashicorp/[email protected]/tfprotov6/tf6server/server.go:656 +0x334
github.com/hashicorp/terraform-plugin-go/tfprotov6/internal/tfplugin6._Provider_ReadDataSource_Handler({0xbbb940?, 0x40000ceb40}, {0xe8cf00, 0x40007658c0}, 0x4000149f80, 0x0)
        github.com/hashicorp/[email protected]/tfprotov6/internal/tfplugin6/tfplugin6_grpc.pb.go:421 +0x164
google.golang.org/grpc.(*Server).processUnaryRPC(0x400048e780, {0xe91c78, 0x4000103380}, 0x40007685a0, 0x4000117bc0, 0x16f8c10, 0x0)
        google.golang.org/[email protected]/server.go:1376 +0xb90
google.golang.org/grpc.(*Server).handleStream(0x400048e780, {0xe91c78, 0x4000103380}, 0x40007685a0, 0x0)
        google.golang.org/[email protected]/server.go:1753 +0x80c
google.golang.org/grpc.(*Server).serveStreams.func1.1()
        google.golang.org/[email protected]/server.go:998 +0x84
created by google.golang.org/grpc.(*Server).serveStreams.func1
        google.golang.org/[email protected]/server.go:996 +0x164

Error: The terraform-provider-zitadel_v1.1.0 plugin crashed!

This is always indicative of a bug within the plugin. It would be immensely
helpful if you could report the crash with the plugin's maintainers so that it
can be fixed. The output above should help diagnose the issue.

I'm kind of hoping this is because my credentials are not correct. What should these look like?:

  jwt_profile_json = <<EOF
    {
      "client_id": "zitadel-admin",
      "client_secret": "Password1!"
    }
EOF

hifabienne Apr 24, 2024
Maintainer

@eliobischof @stebenz can you help here?

musicformellons Apr 24, 2024
Author

FYI: I added it as a bug here now.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Configuration of resources #7816

{{title}}

Replies: 1 comment 6 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Configuration of resources #7816

musicformellons Apr 22, 2024

Replies: 1 comment · 6 replies

fforootd Apr 22, 2024 Maintainer

fforootd Apr 22, 2024 Maintainer

musicformellons Apr 22, 2024 Author

musicformellons Apr 23, 2024 Author

hifabienne Apr 24, 2024 Maintainer

musicformellons Apr 24, 2024 Author

musicformellons
Apr 22, 2024

Replies: 1 comment 6 replies

fforootd
Apr 22, 2024
Maintainer

fforootd Apr 22, 2024
Maintainer

musicformellons Apr 22, 2024
Author

musicformellons Apr 23, 2024
Author

hifabienne Apr 24, 2024
Maintainer

musicformellons Apr 24, 2024
Author