Skip to content

Commit 474de22

Browse files
committed
fix(terraform): Correct assumptions around naming
* Cluster names were not the same as the filenames; * The Service Account name was prefixed with `gha`, the release name. Jira: IAM-1735
1 parent 055edf8 commit 474de22

File tree

3 files changed

+4
-4
lines changed

3 files changed

+4
-4
lines changed

terraform/infra/common/oidc_gke.tf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ module "oidc_gke_webservices_high_private_nonprod" {
44
source = "github.com/mozilla/terraform-modules//aws_gke_oidc_config?ref=aws_gke_oidc_config-0.1.0"
55
gcp_region = "us-west1"
66
gcp_project_id = "moz-fx-webservices-high-nonpro"
7-
gke_cluster_name = "webservices-high-private-nonprod-us-west1"
7+
gke_cluster_name = "webservices-high-nonprod"
88
}
99

1010
# From:
@@ -13,5 +13,5 @@ module "oidc_gke_webservices_high_private_prod" {
1313
source = "github.com/mozilla/terraform-modules//aws_gke_oidc_config?ref=aws_gke_oidc_config-0.1.0"
1414
gcp_region = "us-west1"
1515
gcp_project_id = "moz-fx-webservices-high-prod"
16-
gke_cluster_name = "webservices-high-private-prod-us-west1"
16+
gke_cluster_name = "webservices-high-prod"
1717
}
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
environment = "development"
22
gcp_region = "us-west1"
3-
gke_cluster_name = "webservices-high-private-nonprod-us-west1"
3+
gke_cluster_name = "webservices-high-nonprod"
44
gcp_project_id = "moz-fx-webservices-high-nonpro"
55
gke_namespace = "iam-dev"

terraform/infra/dev/iam_gke.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,6 @@ module "cis_profile_retrieval_api" {
3232
gke_cluster_name = var.gke_cluster_name
3333
gcp_project_id = var.gcp_project_id
3434
gke_namespace = var.gke_namespace
35-
gke_service_account = "cis-profile-retrieval-api"
35+
gke_service_account = "gha-cis-profile-retrieval-api"
3636
iam_policy_arns = [aws_iam_policy.cis_dynamo_read.arn]
3737
}

0 commit comments

Comments
 (0)