kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Support context interpolation for PAM email recipients (#3903)

Browse Source
This commit is contained in:
Ludovico Magnocavallo
2026-04-24 18:29:31 +02:00
committed by GitHub
parent d22320fe62
commit fb33752d8d
5 changed files with 88 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
modules/folder/pam.tf
View File

@@ -117,8 +117,15 @@ resource "google_privileged_access_manager_entitlement" "default" {
]
}
approvals_needed = step.value.approvals_needed
approver_email_recipients = step.value.approver_email_recipients
approvals_needed = step.value.approvals_needed
approver_email_recipients = (
step.value.approver_email_recipients == null
? null
: [
for e in step.value.approver_email_recipients :
lookup(local.ctx.email_addresses, e, e)
]
)
}
}
}
@@ -128,8 +135,22 @@ resource "google_privileged_access_manager_entitlement" "default" {
dynamic "additional_notification_targets" {
for_each = each.value.additional_notification_targets == null ? [] : [""]
content {
admin_email_recipients = each.value.additional_notification_targets.admin_email_recipients
requester_email_recipients = each.value.additional_notification_targets.requester_email_recipients
admin_email_recipients = (
each.value.additional_notification_targets.admin_email_recipients == null
? null
: [
for e in each.value.additional_notification_targets.admin_email_recipients :
lookup(local.ctx.email_addresses, e, e)
]
)
requester_email_recipients = (
each.value.additional_notification_targets.requester_email_recipients == null
? null
: [
for e in each.value.additional_notification_targets.requester_email_recipients :
lookup(local.ctx.email_addresses, e, e)
]
)
}
}