@@ -78,9 +78,9 @@ data "ibm_iam_service_id" "cos_service_id" {
7878
7979
8080resource "ibm_iam_service_policy" "cos_bucket_policy" {
81- count = (local. create_cos_service_api_key ) ? 1 : 0
82- iam_service_id = ibm_iam_service_id. cos_service_id [0 ]. id
83- roles = [" Reader" , " Object Writer" ]
81+ count = (local. create_cos_service_api_key ) ? 1 : 0
82+ iam_id = ibm_iam_service_id. cos_service_id [0 ]. iam_id
83+ roles = [" Reader" , " Object Writer" ]
8484
8585 resource_attributes {
8686 name = " serviceName"
@@ -104,9 +104,9 @@ resource "ibm_iam_service_policy" "cos_bucket_policy" {
104104}
105105
106106resource "ibm_iam_service_policy" "cos_policy" {
107- count = (local. create_cos_service_api_key ) ? 1 : 0
108- iam_service_id = ibm_iam_service_id. cos_service_id [0 ]. id
109- roles = [" Reader" ]
107+ count = (local. create_cos_service_api_key ) ? 1 : 0
108+ iam_id = ibm_iam_service_id. cos_service_id [0 ]. iam_id
109+ roles = [" Reader" ]
110110
111111 resource_attributes {
112112 name = " serviceName"
@@ -120,9 +120,9 @@ resource "ibm_iam_service_policy" "cos_policy" {
120120}
121121
122122resource "ibm_iam_service_policy" "pipeline_policy" {
123- count = (local. create_pipeline_service_api_key ) ? 1 : 0
124- iam_service_id = ibm_iam_service_id. pipeline_service_id [0 ]. id
125- roles = [" Editor" ]
123+ count = (local. create_pipeline_service_api_key ) ? 1 : 0
124+ iam_id = ibm_iam_service_id. pipeline_service_id [0 ]. iam_id
125+ roles = [" Editor" ]
126126
127127 resources {
128128 resource_type = " resource-group"
@@ -131,38 +131,38 @@ resource "ibm_iam_service_policy" "pipeline_policy" {
131131}
132132
133133resource "ibm_iam_service_policy" "cr_policy" {
134- count = (local. create_pipeline_service_api_key ) ? 1 : 0
135- iam_service_id = ibm_iam_service_id. pipeline_service_id [0 ]. id
136- roles = [" Manager" ]
134+ count = (local. create_pipeline_service_api_key ) ? 1 : 0
135+ iam_id = ibm_iam_service_id. pipeline_service_id [0 ]. iam_id
136+ roles = [" Manager" ]
137137 resources {
138138 service = " container-registry"
139139 }
140140}
141141
142142resource "ibm_iam_service_policy" "toolchain_policy" {
143- count = (local. create_pipeline_service_api_key ) ? 1 : 0
144- iam_service_id = ibm_iam_service_id. pipeline_service_id [0 ]. id
145- roles = [" Editor" ]
143+ count = (local. create_pipeline_service_api_key ) ? 1 : 0
144+ iam_id = ibm_iam_service_id. pipeline_service_id [0 ]. iam_id
145+ roles = [" Editor" ]
146146 resources {
147147 service = " toolchain"
148148 resource_group_id = data. ibm_resource_group . resource_group . id
149149 }
150150}
151151
152152resource "ibm_iam_service_policy" "kube_policy" {
153- count = ((var. create_kubernetes_access_policy == true ) && (local. create_pipeline_service_api_key == true )) ? 1 : 0
154- iam_service_id = ibm_iam_service_id. pipeline_service_id [0 ]. id
155- roles = [" Manager" , " Editor" ]
153+ count = ((var. create_kubernetes_access_policy == true ) && (local. create_pipeline_service_api_key == true )) ? 1 : 0
154+ iam_id = ibm_iam_service_id. pipeline_service_id [0 ]. iam_id
155+ roles = [" Manager" , " Editor" ]
156156 resources {
157157 service = " containers-kubernetes"
158158 resource_group_id = data. ibm_resource_group . resource_group . id
159159 }
160160}
161161
162162resource "ibm_iam_service_policy" "ce_policy" {
163- count = ((var. create_code_engine_access_policy == true ) && (local. create_pipeline_service_api_key == true )) ? 1 : 0
164- iam_service_id = ibm_iam_service_id. pipeline_service_id [0 ]. id
165- roles = [" Manager" , " Editor" ]
163+ count = ((var. create_code_engine_access_policy == true ) && (local. create_pipeline_service_api_key == true )) ? 1 : 0
164+ iam_id = ibm_iam_service_id. pipeline_service_id [0 ]. iam_id
165+ roles = [" Manager" , " Editor" ]
166166 resources {
167167 service = " codeengine"
168168 resource_group_id = data. ibm_resource_group . resource_group . id
0 commit comments