kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

support different key names for service accounts in IAM interpolation (#3279)

Browse Source 
Fixes #3278
This commit is contained in:
Ludovico Magnocavallo
2025-08-20 20:45:43 +02:00
committed by GitHub
parent ecb38dfd0e
commit 89d8911741
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/project-factory/automation.tf
View File

@@ -61,6 +61,7 @@ module "automation-bucket" {
iam = {
for k, v in lookup(each.value, "iam", {}) : k => [
for vv in v : try(
module.automation-service-accounts["${each.key}/automation/${vv}"].iam_email,
module.automation-service-accounts["${each.key}/${vv}"].iam_email,
var.factories_config.context.iam_principals[vv],
vv
@@ -92,6 +93,7 @@ module "automation-bucket" {
iam_bindings_additive = {
for k, v in lookup(each.value, "iam_bindings_additive", {}) : k => merge(v, {
member = try(
module.automation-service-accounts["${each.key}/automation/${v.member}"].iam_email,
module.automation-service-accounts["${each.key}/${v.member}"].iam_email,
var.factories_config.context.iam_principals[v.member],
v.member