variable "oidc_arn" {
  type = string
}

variable "env" {
  type = string
}

variable "logical_region_name" {
  type = string
}

variable "auto_deploy_owner_tag" {
  type = string
}

module "crossplane_aws_provider" {
  source = "../../aws_modules/controlplane"

  oidc_arn              = var.oidc_arn
  role_name             = "${var.env}-azure-${var.logical_region_name}-crossplane-aws-provider"
  service_accounts      = ["crossplane-system:aws-provider"]
  auto_deploy_owner_tag = var.auto_deploy_owner_tag
  policy_name           = "IAMFullAccess"
  policy_document = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Action = [
          "iam:*",
        ]
        Effect   = "Allow"
        Resource = "*"
      }
    ]
  })
}

output "crossplane_role_arn" {
  value = module.crossplane_aws_provider.controlplane_role_arn
}