Feature Request: Sudo Entitlements

[joshgch]

I hope this is the correct place to make a feature request, please feel free to close if it isn't.

It would be incredibly useful within my organization to be able to create and manage Sudo Entitlements, as well as assign(bind) them to an oktapam_project_group resource.

Example Usage Pseudocode:

resource "oktapam_entitlement" "this" {
  name = "run-scripts"
  description = "sudo entitlement for running scripts"

  command {
    command = "/opt/scripts/my_script"
    type = "EXECUTABLE"
    arguments = "ANY"
  }

  command {
    command = "/opt/scripts/."
    type = "DIRECTORY"
  }
}

resource "oktapam_project_group" "this" {
  group_name = "team1-standard"
  project_name = "team1-servers-standard"

  create_server_group = true
  server_access = true
  server_admin = false

  group_entitlements [
    oktapam_entitlement.this.id,
  ]
}

[waltergoulet-okta]

Hi @joshgch thanks for filing this request last month. We are reviewing your request to identify a timeline when we can add this capability to the provider. Apologies for the delayed response.

[pshamus]

Hi @joshgch thanks for filing this request last month. We are reviewing your request to identify a timeline when we can add this capability to the provider. Apologies for the delayed response.

@waltergoulet-okta Is there a timeline for when this will be implemented?

[waltergoulet-okta]

Hi @pshamus at this time we still do not have a timeline for this feature. We are in the process of updating the provider to add support for our upcoming Okta Privileged Access product which is taking priority over adding support for additional ASA features at this time.

[pshamus]

Gotcha. So all development for Okta ASA has been halted? Is it being replaced with something else?

[waltergoulet-okta]

No, development on Okta ASA has not been halted. We are extending the Terraform provider to add support for additional Okta products and are prioritizing development of those capabilities over adding more features to the provider to support Okta ASA features.