feat: add folder role assignment acceptance tests

Signed-off-by: Benjamin Ritter <benjamin.ritter@stackit.cloud>

Author: Benjamin Ritter

stackit/internal/services/authorization/authorization_acc_test.go

@@ -33,6 +33,9 @@ var invalidRole string
 //go:embed testfiles/organization-role.tf
 var organizationRole string
 
+//go:embed testfiles/folder-role.tf
+var folderRole string
+
 var testConfigVars = config.Variables{
 	"project_id":           config.StringVariable(testutil.ProjectId),
 	"test_service_account": config.StringVariable(testutil.TestProjectServiceAccountEmail),
@@ -73,6 +76,11 @@ func TestAccProjectRoleAssignmentResource(t *testing.T) {
 				ConfigVariables: testConfigVars,
 				Config:          testutil.AuthorizationProviderConfig() + prerequisites + organizationRole,
 			},
+			{
+				// Assign a resource to a folder
+				ConfigVariables: testConfigVars,
+				Config:          testutil.AuthorizationProviderConfig() + prerequisites + folderRole,
+			},
 			{
 				// The Service Account inherits owner permissions for the project from the organization. Check if you can still assign owner permissions on the project explicitly
 				ConfigVariables: testConfigVars,

stackit/internal/services/authorization/testfiles/folder-role.tf

@@ -0,0 +1,6 @@
+
+resource "stackit_authorization_folder_role_assignment" "serviceaccount" {
+  resource_id = stackit_resourcemanager_folder.test.folder_id
+  role        = "owner"
+  subject     = var.test_service_account
+}

stackit/internal/services/authorization/testfiles/prerequisites.tf

@@ -8,3 +8,9 @@ resource "stackit_authorization_project_role_assignment" "serviceaccount" {
   role        = "reader"
   subject     = var.test_service_account
 }
+
+resource "stackit_resourcemanager_folder" "test" {
+  name                = "test"
+  owner_email         = "foo.bar@stackit.cloud"
+  parent_container_id = var.organization_id
+}