added tags to irsa module

namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-electronic-monitoring-datastore-dev/resources/cross-iam-role-sa.tf

@@ -0,0 +1,63 @@
+
+    module "irsa" {
+      source = "github.com/ministryofjustice/cloud-platform-terraform-irsa?ref=2.0.0"
+      eks_cluster_name      = var.eks_cluster_name
+      service_account_name  = "${var.namespace}-athena-service-account"
+      namespace             = var.namespace
+      role_policy_arns = {
+        athena = aws_iam_policy.athena_access.arn
+      }
+
+      # Tags
+      business_unit          = var.business_unit
+      application            = var.application
+      is_production          = var.is_production
+      team_name              = var.team_name
+      environment_name       = var.environment
+      infrastructure_support = var.infrastructure_support
+    }
+
+    data "aws_iam_policy_document" "document" {
+      # Provide list of permissions and target AWS account resources to allow access to
+      # statement {
+      #   actions = [
+      #     "sts:AssumeRole"
+      #   ]
+      #   # This is a placeholder resource - waiting on real values before merging~
+      #   resources = [
+      #     "arn:aws:iam::321388111150:role/BedrockAccessforCP",
+      #   ]
+      # }
+      statement {
+        actions = [
+          "s3:*",
+        ]
+        resources = [
+          "arn:aws:s3:::*",
+        ]
+      }
+    }
+
+    resource "aws_iam_policy" "athena_access" {
+      name   = "${var.namespace}-athena-policy-general"
+      policy = data.aws_iam_policy_document.document.json
+
+      tags = {
+        business-unit          = var.business_unit
+        application            = var.application
+        is-production          = var.is_production
+        environment-name       = var.environment
+        owner                  = var.team_name
+        infrastructure-support = var.infrastructure_support
+      }
+    }
+    resource "kubernetes_secret" "irsa" {
+      metadata {
+        name      = "${var.namespace}-irsa-output"
+        namespace = var.namespace
+      }
+      data = {
+        role = module.irsa.role_name
+        serviceaccount = module.irsa.service_account.name
+      }
+    }

namespaces/live.cloud-platform.service.justice.gov.uk/hmpps-electronic-monitoring-datastore-dev/resources/variables.tf

@@ -14,6 +14,10 @@ variable "application" {
   default     = "Electronic Monitoring Datastore"
 }
 
+variable "eks_cluster_name" {
+  description = "The name of the eks cluster to retrieve the OIDC information"
+}
+
 variable "namespace" {
   description = "Name of the namespace these resources are part of"
   type        = string