add some more outputs

templates/providers/bootstrap/aws.tf

@@ -67,4 +67,13 @@ provider "helm" {
 
 provider "plural" {
   use_cli = true # If you want to have a Plural stack manage your console, comment this out and use the `actor` field
+}
+
+## useful outputs dumped here, can be moved to a separate file post-generate
+output "cloudwatch_iam_arn" {
+  value = module.mgmt.cloudwatch_iam_arn
+}
+
+output "vpc_id" {
+  value = module.mgmt.vpc.vpc_id
 }

terraform/clouds/aws/iam.tf

@@ -60,8 +60,8 @@ module "assumable_role_cloudwatch_exporter" {
   role_name        = "${var.cluster_name}-cloudwatch-exporter"
   provider_url     = replace(module.eks.cluster_oidc_issuer_url, "https://", "")
   role_policy_arns = [aws_iam_policy.cloudwatch.arn]
-  oidc_fully_qualified_subjects = [
-    "system:serviceaccount:monitoring:cloudwatch-exporter",
+  oidc_subjects_with_wildcards = [
+    "system:serviceaccount:monitoring:cloudwatch-exporter*",
   ]
 }
 

terraform/clouds/aws/outputs.tf

@@ -236,4 +236,8 @@ output "ready" {
 
 output "identity" {
   value = module.assumable_role_stacks.iam_role_arn
+}
+
+output "cloudwatch_iam_arn" {
+  value = module.assumable_role_cloudwatch_exporter.iam_role_arn
 }