module "iam" {
  source = "./iam"

  env                        = var.env
  cloud_region               = var.cloud_region
  logical_region_name        = var.logical_region_name
  cluster_name               = var.cluster_name
  resource_group_name        = module.aks.resource_group_name
  oidc_issuer                = module.aks.oidc_issuer
  key_vault_id               = var.region_key_vault_id
  dns_zone_id                = data.azurerm_dns_zone.controlplane.id
  pingcap_subscription_id    = var.pingcap_subscription_id
  multi_tenant_app_client_id = var.multi_tenant_app_client_id
  metering_container_scope   = "${var.region_metering_storage_account_id}/blobServices/default/containers/${azurerm_storage_container.metering.name}"
  tags                       = local.tags
}