fixing org onboarding (#59)

miguelpais · web-flow · commit 210d5bc5e5bd · 2025-01-22T13:23:09.000+01:00
diff --git a/modules/vm-workload-scanning/organizational.tf b/modules/vm-workload-scanning/organizational.tf
@@ -34,11 +34,9 @@ resource "google_organization_iam_custom_role" "custom_role" {
 }
 
 resource "google_organization_iam_member" "controller" {
-  for_each = var.is_organizational ? toset([
-    "organizations/${data.google_organization.org[0].org_id}/roles/${google_organization_iam_custom_role.custom_role[0].role_id}"
-  ]) : []
+  count = var.is_organizational ? 1 : 0
 
   org_id = data.google_organization.org[0].org_id
-  role   = each.key
+  role   = "organizations/${data.google_organization.org[0].org_id}/roles/${google_organization_iam_custom_role.custom_role[0].role_id}"
   member = "serviceAccount:${google_service_account.controller.email}"
 }

Original file line number	Diff line number	Diff line change
`@@ -34,11 +34,9 @@ resource "google_organization_iam_custom_role" "custom_role" {`
`34`	`34`	`}`
`35`	`35`
`36`	`36`	`resource "google_organization_iam_member" "controller" {`
`37`		`- for_each = var.is_organizational ? toset([`
`38`		`- "organizations/${data.google_organization.org[0].org_id}/roles/${google_organization_iam_custom_role.custom_role[0].role_id}"`
`39`		`- ]) : []`
	`37`	`+ count = var.is_organizational ? 1 : 0`
`40`	`38`
`41`	`39`	`org_id = data.google_organization.org[0].org_id`
`42`		`- role = each.key`
	`40`	`+ role = "organizations/${data.google_organization.org[0].org_id}/roles/${google_organization_iam_custom_role.custom_role[0].role_id}"`
`43`	`41`	`member = "serviceAccount:${google_service_account.controller.email}"`
`44`	`42`	`}`