module "iam-load-balancer-controller" {
  source                = "../aws_modules/iam-aws-load-balancer-controller/controlplane"
  env                   = var.env
  logical_region_name   = var.logical_region_name
  controlplane_account  = local.seed_account
  auto_deploy_owner_tag = local.eks.name
  eks_oidc              = trimprefix(local.eks.oidc_issuer_url, "https://")
}

module "iam-dataplane-manager" {
  source                       = "../aws_modules/iam-dataplane-manager/controlplane"
  env                          = var.env
  logical_region_name          = var.logical_region_name
  controlplane_account         = local.seed_account
  auto_deploy_owner_tag        = local.eks.name
  eks_oidc                     = trimprefix(local.eks.oidc_issuer_url, "https://")
  dataplane_accounts           = var.dataplane_accounts
  is_byoc                      = false
  metering_read_write_role_arn = local.metering_read_write_role_arn
}

module "iam-external-secrets-operator" {
  source                = "../aws_modules/iam-external-secrets-operator/controlplane"
  env                   = var.env
  secret_prefix         = var.env
  logical_region_name   = var.logical_region_name
  controlplane_account  = local.seed_account
  auto_deploy_owner_tag = local.eks.name
  eks_oidc              = trimprefix(local.eks.oidc_issuer_url, "https://")
}

module "iam-cert-manager" {
  source                = "../aws_modules/iam-cert-manager/controlplane"
  env                   = var.env
  logical_region_name   = var.logical_region_name
  controlplane_account  = local.seed_account
  auto_deploy_owner_tag = local.eks.name
  eks_oidc              = trimprefix(local.eks.oidc_issuer_url, "https://")
}

module "iam-cluster-autoscaler" {
  source                = "../aws_modules/iam-cluster-autoscaler/controlplane"
  env                   = var.env
  logical_region_name   = var.logical_region_name
  controlplane_account  = local.seed_account
  auto_deploy_owner_tag = local.eks.name
  eks_oidc              = trimprefix(local.eks.oidc_issuer_url, "https://")
}

module "iam-vector-agent" {
  source                = "../aws_modules/iam-vector-agent/controlplane"
  env                   = var.env
  logical_region_name   = var.logical_region_name
  controlplane_account  = local.seed_account
  assume_o11y_role_arn  = "arn:aws:iam::${local.o11y_account}:role/*"
  auto_deploy_owner_tag = local.eks.name
  eks_oidc              = trimprefix(local.eks.oidc_issuer_url, "https://")
}