outputs.tf

################################################################################
# GitOps Bridge
################################################################################
/*
This output is intended to be used with GitOps when the addons' Helm charts
are going to be installed by a GitOps tool such as ArgoCD or FluxCD.
We guarantee that this output will be maintained any time a new addon is
added or an addon is updated, and new metadata for the Helm chart is needed.
*/
output "gitops_metadata" {
  description = "GitOps Bridge metadata"
  value = merge(
    { for k, v in {
      iam_role_arn    = module.networkfirewall.iam_role_arn
      namespace       = try(var.networkfirewall.namespace, "ack-system")
      service_account = local.networkfirewall_name
      } : "ack_iam_${k}" => v if var.enable_networkfirewall
    },
    { for k, v in {
      iam_role_arn    = module.cloudwatchlogs.iam_role_arn
      namespace       = try(var.cloudwatchlogs.namespace, "ack-system")
      service_account = local.cloudwatchlogs_name
      } : "ack_iam_${k}" => v if var.enable_cloudwatchlogs
    },
    { for k, v in {
      iam_role_arn    = module.kinesis.iam_role_arn
      namespace       = try(var.kinesis.namespace, "ack-system")
      service_account = local.kinesis_name
      } : "ack_iam_${k}" => v if var.enable_kinesis
    },
    { for k, v in {
      iam_role_arn    = module.secretsmanager.iam_role_arn
      namespace       = try(var.secretsmanager.namespace, "ack-system")
      service_account = local.secretsmanager_name
      } : "ack_iam_${k}" => v if var.enable_secretsmanager
    },
    { for k, v in {
      iam_role_arn    = module.route53resolver.iam_role_arn
      namespace       = try(var.route53resolver.namespace, "ack-system")
      service_account = local.route53resolver_name
      } : "ack_iam_${k}" => v if var.enable_route53resolver
    },
    { for k, v in {
      iam_role_arn    = module.route53.iam_role_arn
      namespace       = try(var.route53.namespace, "ack-system")
      service_account = local.route53_name
      } : "ack_iam_${k}" => v if var.enable_route53
    },
    { for k, v in {
      iam_role_arn    = module.organizations.iam_role_arn
      namespace       = try(var.organizations.namespace, "ack-system")
      service_account = local.organizations_name
      } : "ack_iam_${k}" => v if var.enable_organizations
    },
    { for k, v in {
      iam_role_arn    = module.mq.iam_role_arn
      namespace       = try(var.mq.namespace, "ack-system")
      service_account = local.mq_name
      } : "ack_iam_${k}" => v if var.enable_mq
    },
    { for k, v in {
      iam_role_arn    = module.cloudwatch.iam_role_arn
      namespace       = try(var.cloudwatch.namespace, "ack-system")
      service_account = local.cloudwatch_name
      } : "ack_iam_${k}" => v if var.enable_cloudwatch
    },
    { for k, v in {
      iam_role_arn    = module.keyspaces.iam_role_arn
      namespace       = try(var.keyspaces.namespace, "ack-system")
      service_account = local.keyspaces_name
      } : "ack_iam_${k}" => v if var.enable_keyspaces
    },
    { for k, v in {
      iam_role_arn    = module.kafka.iam_role_arn
      namespace       = try(var.kafka.namespace, "ack-system")
      service_account = local.kafka_name
      } : "ack_iam_${k}" => v if var.enable_kafka
    },
    { for k, v in {
      iam_role_arn    = module.efs.iam_role_arn
      namespace       = try(var.efs.namespace, "ack-system")
      service_account = local.efs_name
      } : "ack_iam_${k}" => v if var.enable_efs
    },
    { for k, v in {
      iam_role_arn    = module.ecs.iam_role_arn
      namespace       = try(var.ecs.namespace, "ack-system")
      service_account = local.ecs_name
      } : "ack_iam_${k}" => v if var.enable_ecs
    },
    { for k, v in {
      iam_role_arn    = module.cloudtrail.iam_role_arn
      namespace       = try(var.cloudtrail.namespace, "ack-system")
      service_account = local.cloudtrail_name
      } : "ack_iam_${k}" => v if var.enable_cloudtrail
    },
    { for k, v in {
      iam_role_arn    = module.cloudfront.iam_role_arn
      namespace       = try(var.cloudfront.namespace, "ack-system")
      service_account = local.cloudfront_name
      } : "ack_iam_${k}" => v if var.enable_cloudfront
    },
    { for k, v in {
      iam_role_arn    = module.applicationautoscaling.iam_role_arn
      namespace       = try(var.applicationautoscaling.namespace, "ack-system")
      service_account = local.applicationautoscaling_name
      } : "ack_iam_${k}" => v if var.enable_applicationautoscaling
    },
    { for k, v in {
      iam_role_arn    = module.sagemaker.iam_role_arn
      namespace       = try(var.sagemaker.namespace, "ack-system")
      service_account = local.sagemaker_name
      } : "ack_iam_${k}" => v if var.enable_sagemaker
    },
    { for k, v in {
      iam_role_arn    = module.memorydb.iam_role_arn
      namespace       = try(var.memorydb.namespace, "ack-system")
      service_account = local.memorydb_name
      } : "ack_iam_${k}" => v if var.enable_memorydb
    },
    { for k, v in {
      iam_role_arn    = module.opensearchservice.iam_role_arn
      namespace       = try(var.opensearchservice.namespace, "ack-system")
      service_account = local.opensearchservice_name
      } : "ack_iam_${k}" => v if var.enable_opensearchservice
    },
    { for k, v in {
      iam_role_arn    = module.ecr.iam_role_arn
      namespace       = try(var.ecr.namespace, "ack-system")
      service_account = local.ecr_name
      } : "ack_iam_${k}" => v if var.enable_ecr
    },
    { for k, v in {
      iam_role_arn    = module.sns.iam_role_arn
      namespace       = try(var.sns.namespace, "ack-system")
      service_account = local.sns_name
      } : "ack_iam_${k}" => v if var.enable_sns
    },
    { for k, v in {
      iam_role_arn    = module.sqs.iam_role_arn
      namespace       = try(var.sqs.namespace, "ack-system")
      service_account = local.sqs_name
      } : "ack_iam_${k}" => v if var.enable_sqs
    },
    { for k, v in {
      iam_role_arn    = module.lambda.iam_role_arn
      namespace       = try(var.lambda.namespace, "ack-system")
      service_account = local.lambda_name
      } : "ack_iam_${k}" => v if var.enable_lambda
    },
    { for k, v in {
      iam_role_arn    = module.iam.iam_role_arn
      namespace       = try(var.iam.namespace, "ack-system")
      service_account = local.iam_name
      } : "ack_iam_${k}" => v if var.enable_iam
    },
    { for k, v in {
      iam_role_arn    = module.ec2.iam_role_arn
      namespace       = try(var.ec2.namespace, "ack-system")
      service_account = local.ec2_name
      } : "ack_ec2_${k}" => v if var.enable_ec2
    },
    { for k, v in {
      iam_role_arn    = module.eks.iam_role_arn
      namespace       = try(var.eks.namespace, "ack-system")
      service_account = local.eks_name
      } : "ack_eks_${k}" => v if var.enable_eks
    },
    { for k, v in {
      iam_role_arn    = module.kms.iam_role_arn
      namespace       = try(var.kms.namespace, "ack-system")
      service_account = local.kms_name
      } : "ack_kms_${k}" => v if var.enable_kms
    },
    { for k, v in {
      iam_role_arn    = module.acm.iam_role_arn
      namespace       = try(var.acm.namespace, "ack-system")
      service_account = local.acm_name
      } : "ack_acm_${k}" => v if var.enable_acm
    },
    { for k, v in {
      iam_role_arn    = module.apigatewayv2.iam_role_arn
      namespace       = try(var.apigatewayv2.namespace, "ack-system")
      service_account = local.apigatewayv2_name
      } : "ack_apigatewayv2_${k}" => v if var.enable_apigatewayv2
    },
    { for k, v in {
      iam_role_arn    = module.dynamodb.iam_role_arn
      namespace       = try(var.dynamodb.namespace, "ack-system")
      service_account = local.dynamodb_name
      } : "ack_dynamodb_${k}" => v if var.enable_dynamodb
    },
    { for k, v in {
      iam_role_arn    = module.s3.iam_role_arn
      namespace       = try(var.s3.namespace, "ack-system")
      service_account = local.s3_name
      } : "ack_s3_${k}" => v if var.enable_s3
    },
    { for k, v in {
      iam_role_arn    = module.rds.iam_role_arn
      namespace       = try(var.rds.namespace, "ack-system")
      service_account = local.rds_name
      } : "ack_rds_${k}" => v if var.enable_rds
    },
    { for k, v in {
      iam_role_arn    = module.prometheusservice.iam_role_arn
      namespace       = try(var.prometheusservice.namespace, "ack-system")
      service_account = local.prometheusservice_name
      } : "ack_prometheusservice_${k}" => v if var.enable_prometheusservice
    },
    { for k, v in {
      iam_role_arn    = module.emrcontainers.iam_role_arn
      namespace       = try(var.emrcontainers.namespace, "ack-system")
      service_account = local.emrcontainers_name
      } : "ack_emrcontainers_${k}" => v if var.enable_emrcontainers
    },
    { for k, v in {
      iam_role_arn    = module.sfn.iam_role_arn
      namespace       = try(var.sfn.namespace, "ack-system")
      service_account = local.sfn_name
      } : "ack_sfn_${k}" => v if var.enable_sfn
    },
    { for k, v in {
      iam_role_arn    = module.eventbridge.iam_role_arn
      namespace       = try(var.eventbridge.namespace, "ack-system")
      service_account = local.eventbridge_name
      } : "ack_eventbridge_${k}" => v if var.enable_eventbridge
    },
    { for k, v in {
      iam_role_arn    = module.elasticache.iam_role_arn
      namespace       = try(var.elasticache.namespace, "ack-system")
      service_account = local.elasticache_name
      } : "ack_elasticache_${k}" => v if var.enable_elasticache
    }
  )
}