kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix 0-bootstrap iam_by_principals not taking into account all principals (#2267)

Browse Source 
* Fix 0-bootstrap iam_by_principals not taking into account all principals
* Add test-case for iam_by_principals for 0-bootstrap stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
This commit is contained in:
Wiktor Niesiobędzki
2024-05-12 21:02:04 +02:00
committed by GitHub
parent 6a3c7fe444
commit af253c9702
5 changed files with 53 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
fast/stages/0-bootstrap/organization.tf
View File

@@ -138,8 +138,14 @@ module "organization" {
organization_id = module.organization-logging.id
# human (groups) IAM bindings
iam_by_principals = {
for k, v in local.iam_principals :
k => distinct(concat(v, lookup(var.iam_by_principals, k, [])))
for key in distinct(concat(
keys(local.iam_principals),
keys(var.iam_by_principals),
)) :
key => distinct(concat(
lookup(local.iam_principals, key, []),
lookup(var.iam_by_principals, key, []),
))
}
# machine (service accounts) IAM bindings
iam = merge(