Interpolate SAs in tag-level iam (#2836)

2025-01-24 10:39:03 +01:00
parent f6a8190946
commit bee7e30b2b
1 changed files with 9 additions and 0 deletions
--- a/fast/stages/1-resman/organization.tf
+++ b/fast/stages/1-resman/organization.tf
@@ -72,6 +72,15 @@ locals {
  # service account expansion for user-specified tag values
  tags = {
    for k, v in var.tags : k => merge(v, {
+      iam = {
+        for rk, rv in v.iam : rk => [
+          for rm in rv : (
+            contains(keys(local.service_accounts), rm)
+            ? "serviceAccount:${local.service_accounts[rm]}"
+            : rm
+          )
+        ]
+      }
      values = {
        for vk, vv in v.values : vk => merge(vv, {
          iam = {