coder
diff --git a/‎.gitignore
+3-1 b/‎.gitignore
+3-1
diff --git a/‎docs/functions/example.md
-26 b/‎docs/functions/example.md
-26
diff --git a/‎docs/index.md
+2-1 b/‎docs/index.md
+2-1
diff --git a/‎docs/resources/example.md
-31 b/‎docs/resources/example.md
-31
diff --git a/‎docs/resources/user.md
+33 b/‎docs/resources/user.md
+33
diff --git a/‎go.mod
+2-1 b/‎go.mod
+2-1
diff --git a/‎go.sum
+4 b/‎go.sum
+4
diff --git a/‎integration/example-test/main.tf
-12 b/‎integration/example-test/main.tf
-12
diff --git a/‎integration/integration_test.go
+40-3 b/‎integration/integration_test.go
+40-3
diff --git a/‎integration/user-test/main.tf
+18 b/‎integration/user-test/main.tf
+18
diff --git a/‎internal/provider/example_function.go
-50 b/‎internal/provider/example_function.go
-50
diff --git a/‎internal/provider/example_function_test.go
-78 b/‎internal/provider/example_function_test.go
-78
@@ -36,4 +36,6 @@ website/vendor
 terraform-provider-coderd
 
 # Needs to be written on each invocation
-integration/integration.tfrc
+integration/integration.tfrc
+
+*.tfstate
@@ -23,4 +23,5 @@ provider "coderd" {
 
 ### Optional
 
-- `endpoint` (String) Example provider attribute
+- `token` (String) API token for communicating with the deployment. Most resource types require elevated permissions. Defaults to $CODER_SESSION_TOKEN.
+- `url` (String) URL to the Coder deployment. Defaults to $CODER_URL.
@@ -0,0 +1,33 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "coderd_user Resource - coderd"
+subcategory: ""
+description: |-
+  A user on the Coder deployment.
+---
+
+# coderd_user (Resource)
+
+A user on the Coder deployment.
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `email` (String) Email address of the user.
+- `username` (String) Username of the user.
+
+### Optional
+
+- `login_type` (String) Type of login for the user. Valid types are 'none', 'password', 'github', and 'oidc'.
+- `name` (String) Display name of the user. Defaults to username.
+- `password` (String, Sensitive) Password for the user. Required when login_type is 'password'. Passwords are saved into the state as plain text and should only be used for testing purposes.
+- `roles` (Set of String) Roles assigned to the user. Valid roles are 'owner', 'template-admin', 'user-admin', and 'auditor'.
+- `suspended` (Boolean) Whether the user is suspended.
+
+### Read-Only
+
+- `id` (String) User ID
@@ -7,7 +7,7 @@ require (
 	github.com/docker/docker v26.1.4+incompatible
 	github.com/docker/go-connections v0.4.0
 	github.com/hashicorp/terraform-plugin-docs v0.19.4
-	github.com/hashicorp/terraform-plugin-framework v1.9.0
+	github.com/hashicorp/terraform-plugin-framework v1.10.0
 	github.com/hashicorp/terraform-plugin-go v0.23.0
 	github.com/hashicorp/terraform-plugin-log v0.9.0
 	github.com/hashicorp/terraform-plugin-testing v1.8.0
@@ -78,6 +78,7 @@ require (
 	github.com/hashicorp/logutils v1.0.0 // indirect
 	github.com/hashicorp/terraform-exec v0.21.0 // indirect
 	github.com/hashicorp/terraform-json v0.22.1 // indirect
+	github.com/hashicorp/terraform-plugin-framework-validators v0.13.0 // indirect
 	github.com/hashicorp/terraform-plugin-sdk/v2 v2.33.0 // indirect
 	github.com/hashicorp/terraform-registry-address v0.2.3 // indirect
 	github.com/hashicorp/terraform-svchost v0.1.1 // indirect
 
@@ -237,6 +237,10 @@ github.com/hashicorp/terraform-plugin-docs v0.19.4 h1:G3Bgo7J22OMtegIgn8Cd/CaSey
 github.com/hashicorp/terraform-plugin-docs v0.19.4/go.mod h1:4pLASsatTmRynVzsjEhbXZ6s7xBlUw/2Kt0zfrq8HxA=
 github.com/hashicorp/terraform-plugin-framework v1.9.0 h1:caLcDoxiRucNi2hk8+j3kJwkKfvHznubyFsJMWfZqKU=
 github.com/hashicorp/terraform-plugin-framework v1.9.0/go.mod h1:qBXLDn69kM97NNVi/MQ9qgd1uWWsVftGSnygYG1tImM=
+github.com/hashicorp/terraform-plugin-framework v1.10.0 h1:xXhICE2Fns1RYZxEQebwkB2+kXouLC932Li9qelozrc=
+github.com/hashicorp/terraform-plugin-framework v1.10.0/go.mod h1:qBXLDn69kM97NNVi/MQ9qgd1uWWsVftGSnygYG1tImM=
+github.com/hashicorp/terraform-plugin-framework-validators v0.13.0 h1:bxZfGo9DIUoLLtHMElsu+zwqI4IsMZQBRRy4iLzZJ8E=
+github.com/hashicorp/terraform-plugin-framework-validators v0.13.0/go.mod h1:wGeI02gEhj9nPANU62F2jCaHjXulejm/X+af4PdZaNo=
 github.com/hashicorp/terraform-plugin-go v0.23.0 h1:AALVuU1gD1kPb48aPQUjug9Ir/125t+AAurhqphJ2Co=
 github.com/hashicorp/terraform-plugin-go v0.23.0/go.mod h1:1E3Cr9h2vMlahWMbsSEcNrOCxovCZhOOIXjFHbjc/lQ=
 github.com/hashicorp/terraform-plugin-log v0.9.0 h1:i7hOA+vdAItN1/7UrfBqBwvYPQ9TFvymaRGZED3FCV0=
 
@@ -4,6 +4,7 @@ import (
 	"bytes"
 	"context"
 	"fmt"
+	"io"
 	"net"
 	"net/url"
 	"os"
@@ -15,6 +16,7 @@ import (
 
 	"github.com/coder/coder/v2/codersdk"
 	"github.com/docker/docker/api/types/container"
+	"github.com/docker/docker/api/types/image"
 	"github.com/docker/docker/client"
 	"github.com/docker/go-connections/nat"
 	"github.com/stretchr/testify/assert"
@@ -50,11 +52,33 @@ func TestIntegration(t *testing.T) {
 		assertF func(testing.TB, *codersdk.Client)
 	}{
 		{
-			name: "example-test",
+			name: "user-test",
 			assertF: func(t testing.TB, c *codersdk.Client) {
-				me, err := c.User(ctx, codersdk.Me)
+				// Check user fields.
+				user, err := c.User(ctx, "dean")
 				assert.NoError(t, err)
-				assert.NotEmpty(t, me)
+				assert.Equal(t, "dean", user.Username)
+				assert.Equal(t, "Dean Coolguy", user.Name)
+				assert.Equal(t, "[email protected]", user.Email)
+				roles := make([]string, len(user.Roles))
+				for i, role := range user.Roles {
+					roles[i] = role.Name
+				}
+				assert.ElementsMatch(t, []string{"owner", "template-admin"}, roles)
+				assert.Equal(t, codersdk.LoginTypePassword, user.LoginType)
+				assert.Contains(t, []codersdk.UserStatus{codersdk.UserStatusActive, codersdk.UserStatusDormant}, user.Status)
+
+				// Test password.
+				newClient := codersdk.New(c.URL)
+				res, err := newClient.LoginWithPassword(ctx, codersdk.LoginWithPasswordRequest{
+					Email:    "[email protected]",
+					Password: "SomeSecurePassword!",
+				})
+				assert.NoError(t, err)
+				newClient.SetSessionToken(res.SessionToken)
+				user, err = newClient.User(ctx, codersdk.Me)
+				assert.NoError(t, err)
+				assert.Equal(t, "dean", user.Username)
 			},
 		},
 	} {
@@ -63,6 +87,14 @@ func TestIntegration(t *testing.T) {
 			wd, err := os.Getwd()
 			require.NoError(t, err)
 			srcDir := filepath.Join(wd, tt.name)
+			// Delete all .tfstate files
+			err = filepath.Walk(srcDir, func(path string, info os.FileInfo, err error) error {
+				if filepath.Ext(path) == ".tfstate" {
+					return os.Remove(path)
+				}
+				return nil
+			})
+			require.NoError(t, err)
 			tfCmd := exec.CommandContext(ctx, "terraform", "-chdir="+srcDir, "apply", "-auto-approve")
 			tfCmd.Env = append(tfCmd.Env, "TF_CLI_CONFIG_FILE="+tfrcPath)
 			tfCmd.Env = append(tfCmd.Env, "CODER_URL="+client.URL.String())
@@ -124,6 +156,11 @@ func startCoder(ctx context.Context, t *testing.T, name string) *codersdk.Client
 	p := randomPort(t)
 	t.Logf("random port is %d", p)
 	// Stand up a temporary Coder instance
+	puller, err := cli.ImagePull(ctx, coderImg+":"+coderVersion, image.PullOptions{})
+	require.NoError(t, err, "pull coder image")
+	defer puller.Close()
+	_, err = io.Copy(os.Stderr, puller)
+	require.NoError(t, err, "pull coder image")
 	ctr, err := cli.ContainerCreate(ctx, &container.Config{
 		Image: coderImg + ":" + coderVersion,
 		Env: []string{
 
@@ -0,0 +1,18 @@
+terraform {
+  required_providers {
+    coderd = {
+      source  = "coder/coderd"
+      version = ">=0.0.0"
+    }
+  }
+}
+
+resource "coderd_user" "dean" {
+  username   = "dean"
+  name       = "Dean Coolguy"
+  email      = "[email protected]"
+  roles      = ["owner", "template-admin"]
+  login_type = "password"
+  password   = "SomeSecurePassword!"
+  suspended  = false
+}