variable "oidc_arn" {
  type = string
}

variable "env" {
  type = string
}

variable "logical_region_name" {
  type = string
}

variable "auto_deploy_owner_tag" {
  type = string
}

module "crossplane-aws-provider" {
  source = "../../aws_modules/controlplane"

  oidc_arn              = var.oidc_arn
  role_name             = "${var.env}-ali-${var.logical_region_name}-crossplane-aws-provider"
  service_accounts      = ["crossplane-system:aws-provider"]
  auto_deploy_owner_tag = var.auto_deploy_owner_tag
  policy_name           = "IAMFullAccess"
  policy_document = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        "Action" : [
          "iam:*",
        ],
        "Effect" : "Allow",
        "Resource" : "*"
      }
    ]
  })
}

output "crossplane_role_arn" {
  value = module.crossplane-aws-provider.controlplane_role_arn
}