From 0c95b22a218251537791b7950a7ff223d8ef22d2 Mon Sep 17 00:00:00 2001
From: RoseSecurity <michael@rosesecurity.dev>
Date: Thu, 9 Oct 2025 12:52:41 -0400
Subject: [PATCH 1/2] feat(ssm-secrets): add support for extra config options

Add support for passing `parameter_store_paths`, `resources`, `serviceAccount`,
and `rbac` options to the external_ssm_secrets module. This enables more
flexible configuration of the secrets operator, including custom RBAC and
service account settings.
---
 src/main.tf | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/main.tf b/src/main.tf
index 367bfad..bd79a04 100644
--- a/src/main.tf
+++ b/src/main.tf
@@ -128,7 +128,15 @@ module "external_ssm_secrets" {
 
   values = compact([
     yamlencode({
-      region = var.region
+      region                = var.region,
+      parameter_store_paths = var.parameter_store_paths
+      resources             = var.resources
+      serviceAccount = {
+        name = module.this.name
+      }
+      rbac = {
+        create = var.rbac_enabled
+      }
     })
   ])
 

From 156a8a78e0717e76e7277ef46d89ee1877806c49 Mon Sep 17 00:00:00 2001
From: RoseSecurity <michael@rosesecurity.dev>
Date: Thu, 9 Oct 2025 13:00:04 -0400
Subject: [PATCH 2/2] chore: remove comma

---
 src/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main.tf b/src/main.tf
index bd79a04..0badc99 100644
--- a/src/main.tf
+++ b/src/main.tf
@@ -128,7 +128,7 @@ module "external_ssm_secrets" {
 
   values = compact([
     yamlencode({
-      region                = var.region,
+      region                = var.region
       parameter_store_paths = var.parameter_store_paths
       resources             = var.resources
       serviceAccount = {