saidsef / terraform-aws-terraform-cloud-oidc Goto Github PK

#
# Define OIDC provider for TFC and ReadOnly IAM role
#
module "tfc_oidc_provider_and_readonly_role" {
  source  = "saidsef/terraform-cloud-oidc/aws"
  version = "1.7.3"

  attach_admin_policy           = false
  attach_read_only_policy       = true
  
  create_oidc_provider          = true
  enabled                       = true
  
  force_detach_policies         = false
  organisation                  = var.tfc_organization_name
  projects                      = local.tfc_projects
  iam_role_name                 = "terraform-cloud-readonly-iam-role-${local.account_id}"
  iam_role_path                 = "/"
  iam_role_permissions_boundary = ""
  iam_role_policy_arns          = []
  max_session_duration          = 3600
  tags                          = local.tags
  url                           = var.tfc_hostname
}

#
# Define IAM role with admin permissions for existing OIDC provider
#
module "tfc_oidc_provider_admin_role" {
  source  = "saidsef/terraform-cloud-oidc/aws"
  version = "1.7.3"
  depends_on = [
    module.tfc_oidc_provider_and_readonly_role
  ]

  attach_admin_policy           = true
  attach_read_only_policy       = false
  
  create_oidc_provider          = false
  enabled                       = true
  
  force_detach_policies         = false
  organisation                  = var.tfc_organization_name
  projects                      = local.tfc_projects
  iam_role_name                 = "terraform-cloud-admin-iam-role-${local.account_id}"
  iam_role_path                 = "/"
  iam_role_permissions_boundary = ""
  iam_role_policy_arns          = []
  max_session_duration          = 3600
  tags                          = local.tags
  url                           = var.tfc_hostname
}

╷
│ Error: Invalid index
│ 
│   on .terraform/modules/tfc_oidc_provider_admin_role/current.tf line 22, in data "aws_iam_policy_document" "assume_role":
│   22:       values   = [format("%s", one(aws_iam_openid_connect_provider.provider[0].client_id_list))]
│     ├────────────────
│     │ aws_iam_openid_connect_provider.provider is empty tuple
│ 
│ The given key does not identify an element in this collection value: the collection has no elements.
╵