Merge pull request #3 from worldcoin/feat/aws-load-balancer/add-variable-to-control-aws-load-balancer-iam-role-creation

INFRA-5029(aws-load-balancer): Add variable to control AWS Load Balancer IAM role creation

Author: marcin-janas

iam-aws-load-balancer.tf

@@ -329,13 +329,25 @@ data "aws_iam_policy_document" "aws_load_balancer" {
 }
 
 resource "aws_iam_role" "aws_load_balancer" {
+  count              = var.aws_load_balancer_iam_role_enabled ? 1 : 0
   name               = "aws-load-balancer-controller-${var.cluster_name}"
   path               = "/system/"
   assume_role_policy = data.aws_iam_policy_document.aws_load_balancer_assume_role_policy.json
 }
 
 resource "aws_iam_role_policy" "aws_load_balancer" {
+  count  = var.aws_load_balancer_iam_role_enabled ? 1 : 0
   name   = "aws-load-balancer-controller-${var.cluster_name}"
-  role   = aws_iam_role.aws_load_balancer.id
+  role   = aws_iam_role.aws_load_balancer[0].id
   policy = data.aws_iam_policy_document.aws_load_balancer.json
 }
+
+moved {
+  from = aws_iam_role.aws_load_balancer
+  to   = aws_iam_role.aws_load_balancer[0]
+}
+
+moved {
+  from = aws_iam_role_policy.aws_load_balancer
+  to   = aws_iam_role_policy.aws_load_balancer[0]
+}

variables.tf

@@ -656,3 +656,9 @@ variable "vpc_cni_external_snat" {
   type        = string
   default     = false
 }
+
+variable "aws_load_balancer_iam_role_enabled" {
+  description = "Whether to enable the IAM role for the AWS Load Balancer"
+  type        = bool
+  default     = true
+}