kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

don't create resources for aservice agents not in services (#2820)

Browse Source
This commit is contained in:
Ludovico Magnocavallo
2025-01-17 16:55:41 +01:00
committed by GitHub
parent 8b31a006c7
commit 0a72d26f49
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
modules/project/service-agents.tf
View File

@@ -31,17 +31,20 @@ locals {
for api in concat(local.services, ["cloudservices"]) : {
for agent in lookup(local._service_agents_by_api, api, []) :
(agent.name) => merge(agent, {
email = format(agent.identity, local.project.number)
iam_email = "serviceAccount:${format(agent.identity, local.project.number)}"
email = format(agent.identity, local.project.number)
iam_email = "serviceAccount:${format(agent.identity, local.project.number)}"
create_jit = api == "cloudservices" || contains(var.services, api)
})
}
]...)
# list of APIs with primary agents that should be created for the
# current project, if the user requested it
primary_service_agents = [
for agent in local._project_service_agents :
agent.api
if agent.is_primary && var.service_agents_config.create_primary_agents
for agent in local._project_service_agents : agent.api if(
agent.is_primary &&
var.service_agents_config.create_primary_agents &&
agent.create_jit
)
]
# list of roles that should be granted to service agents for the
# current project, if the user requested it