Fix 0-bootstrap iam_by_principals not taking into account all principals

GoogleCloudPlatform · May 12, 2024 · a78cd30 · a78cd30
1 parent 35a17a4
commit a78cd30
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/fast/stages/0-bootstrap/organization.tf b/fast/stages/0-bootstrap/organization.tf
@@ -138,8 +138,11 @@ module "organization" {
   organization_id = module.organization-logging.id
   # human (groups) IAM bindings
   iam_by_principals = {
-    for k, v in local.iam_principals :
-    k => distinct(concat(v, lookup(var.iam_by_principals, k, [])))
+    for key in concat(keys(local.iam_principals), keys(var.iam_by_principals)) :
+    key => distinct(concat(
+      lookup(local.iam_principals, key, []),
+      lookup(var.iam_by_principals, key, [])
+    ))
   }
   # machine (service accounts) IAM bindings
   iam = merge(