fixing the IAM policy in SQS

dunefro · dunefro · commit e51f9e8012d5 · 2025-04-04T23:28:39.000+05:30
diff --git a/locals.tf b/locals.tf
@@ -41,11 +41,11 @@ locals {
       }
     }
   }
-  karpenter_controller_role_policy_arns = merge(
-    var.create_karpenter_iam_role ? {
+  karpenter_controller_role_policy_arns = var.create_karpenter_iam_role ? merge(
+    {
       "sqs_policy" = aws_iam_policy.sqs[0].arn
-    } : {},
+    },
     var.additional_controller_role_policies_arn
-  )
+  ) : {}
   service_account_namespaces = var.k8s_service_account_namespace == "karpenter" ? ["${var.k8s_service_account_namespace}:${var.k8s_service_account_name}"] : ["${var.k8s_service_account_namespace}:${var.k8s_service_account_name}", "karpenter:${var.k8s_service_account_name}"]
 }

Original file line number	Diff line number	Diff line change
`@@ -41,11 +41,11 @@ locals {`
`41`	`41`	`}`
`42`	`42`	`}`
`43`	`43`	`}`
`44`		`- karpenter_controller_role_policy_arns = merge(`
`45`		`- var.create_karpenter_iam_role ? {`
	`44`	`+ karpenter_controller_role_policy_arns = var.create_karpenter_iam_role ? merge(`
	`45`	`+ {`
`46`	`46`	`"sqs_policy" = aws_iam_policy.sqs[0].arn`
`47`		`- } : {},`
	`47`	`+ },`
`48`	`48`	`var.additional_controller_role_policies_arn`
`49`		`- )`
	`49`	`+ ) : {}`
`50`	`50`	`service_account_namespaces = var.k8s_service_account_namespace == "karpenter" ? ["${var.k8s_service_account_namespace}:${var.k8s_service_account_name}"] : ["${var.k8s_service_account_namespace}:${var.k8s_service_account_name}", "karpenter:${var.k8s_service_account_name}"]`
`51`	`51`	`}`