Fix assume_role handling when role_arn is given

mikalinnanoja-rovio · mikalinnanoja-rovio · commit 5bd566ff238c · 2025-09-18T13:27:32.000+02:00
There is a syntax error in the assume_role block with missing
equals sign.

As this part has anyway required newer terraform to work, document
it in variable definition of role_arn input.
diff --git a/templates/terraform.tf.tpl b/templates/terraform.tf.tpl
@@ -8,8 +8,7 @@ terraform {
     profile = "${profile}"
     encrypt = "${encrypt}"
     %{~ if role_arn != "" ~}
-
-    assume_role {
+    assume_role = {
       role_arn = "${role_arn}"
     }
     %{~ endif ~}
diff --git a/variables.tf b/variables.tf
@@ -104,7 +104,7 @@ variable "profile" {
 variable "role_arn" {
   type        = string
   default     = ""
-  description = "The role to be assumed"
+  description = "The role to be assumed. If this is set, `terraform_version` variable must be `1.6.0` or higher."
 }
 
 variable "terraform_backend_config_file_name" {

Original file line number	Diff line number	Diff line change
`@@ -104,7 +104,7 @@ variable "profile" {`
`104`	`104`	`variable "role_arn" {`
`105`	`105`	`type = string`
`106`	`106`	`default = ""`
`107`		`- description = "The role to be assumed"`
	`107`	+ description = "The role to be assumed. If this is set, `terraform_version` variable must be `1.6.0` or higher."
`108`	`108`	`}`
`109`	`109`
`110`	`110`	`variable "terraform_backend_config_file_name" {`