Allow setting service_account_set_key_path for more than one key

[nitrocode]

Have a question? Please checkout our Slack Community or visit our Slack Archive.

Describe the Feature

Allow setting service_account_set_key_path for more than one key for cases like datadog where we may want to use the same role for the following

clusterAgent.rbac.serviceAccountAnnotations.eks\\.amazonaws\\.com/role-arn
agents.rbac.serviceAccountAnnotations.eks\\.amazonaws\\.com/role-arn

A single input would only code one of those. We should be able to set multiple.

Workaround

locals {
  service_account_name = "datadog*"

  iam_role_arn = "arn:${data.aws_partition.current.partition}:iam::${data.aws_caller_identity.current.account_id}:role/${module.this.id}-${trimsuffix(local.service_account_name, "*")}@${var.kubernetes_namespace}"
}

module "datadog_agent" {
  source  = "cloudposse/helm-release/aws"
  version = "0.7.0"

  # ...

  set = [
    {
      name  = "clusterAgent.rbac.serviceAccountAnnotations.eks\\.amazonaws\\.com/role-arn"
      type  = "string"
      value = local.iam_role_arn
    },
    {
      name  = "agents.rbac.serviceAccountAnnotations.eks\\.amazonaws\\.com/role-arn"
      type  = "string"
      value = local.iam_role_arn
    },
  ]
}