kafka-shared/iam: allow event-forwarder to consume revoked topic (#138)

Jarota · web-flow · commit 4278eb04fa87 · 2024-02-08T15:23:52.000Z
* kafka-shared/iam: allow event-forwarder to consume revoked topic

* feedback
diff --git a/dev-aws/kafka-shared/iam.tf b/dev-aws/kafka-shared/iam.tf
@@ -127,6 +127,7 @@ module "iam_jwks_publisher" {
 module "iam_identitydb_event_forwarder" {
   source           = "../../modules/tls-app"
   produce_topics   = [kafka_topic.iam_identitydb_v1.name]
+  consume_topics   = { (kafka_topic.iam_revoked_v1.name) : "iam.identitydb-event-forwarder" }
   cert_common_name = "auth/iam-identitydb-event-forwarder"
 }
 
diff --git a/prod-aws/kafka-shared/iam.tf b/prod-aws/kafka-shared/iam.tf
@@ -86,6 +86,7 @@ module "iam_jwks_publisher" {
 module "iam_identitydb_event_forwarder" {
   source           = "../../modules/tls-app"
   produce_topics   = [kafka_topic.iam_identitydb_v1.name]
+  consume_topics   = { (kafka_topic.iam_revoked_v1.name) : "iam.identitydb-event-forwarder" }
   cert_common_name = "auth/iam-identitydb-event-forwarder"
 }
 

Original file line number	Diff line number	Diff line change
`@@ -127,6 +127,7 @@ module "iam_jwks_publisher" {`
`127`	`127`	`module "iam_identitydb_event_forwarder" {`
`128`	`128`	`source = "../../modules/tls-app"`
`129`	`129`	`produce_topics = [kafka_topic.iam_identitydb_v1.name]`
	`130`	`+ consume_topics = { (kafka_topic.iam_revoked_v1.name) : "iam.identitydb-event-forwarder" }`
`130`	`131`	`cert_common_name = "auth/iam-identitydb-event-forwarder"`
`131`	`132`	`}`
`132`	`133`
Original file line number	Diff line number	Diff line change
`@@ -86,6 +86,7 @@ module "iam_jwks_publisher" {`
`86`	`86`	`module "iam_identitydb_event_forwarder" {`
`87`	`87`	`source = "../../modules/tls-app"`
`88`	`88`	`produce_topics = [kafka_topic.iam_identitydb_v1.name]`
	`89`	`+ consume_topics = { (kafka_topic.iam_revoked_v1.name) : "iam.identitydb-event-forwarder" }`
`89`	`90`	`cert_common_name = "auth/iam-identitydb-event-forwarder"`
`90`	`91`	`}`
`91`	`92`