From afd97a82178807165b2fc335d2ceeb2a4972e9fc Mon Sep 17 00:00:00 2001
From: Dominic Robinson <65237317+drobinson-moj@users.noreply.github.com>
Date: Tue, 23 Jan 2024 12:34:08 +0000
Subject: [PATCH] Share domain secrets with planetfm and csr (#4672)

---
 .../environments/hmpps-domain-services/locals_domain.tf   | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/terraform/environments/hmpps-domain-services/locals_domain.tf b/terraform/environments/hmpps-domain-services/locals_domain.tf
index bb2d61e11b1..3aa3b42ad57 100644
--- a/terraform/environments/hmpps-domain-services/locals_domain.tf
+++ b/terraform/environments/hmpps-domain-services/locals_domain.tf
@@ -5,11 +5,19 @@ locals {
     test = [
       "arn:aws:iam::${module.environment.account_ids.hmpps-domain-services-development}:role/EC2HmppsDomainSecretsRole",
       "arn:aws:iam::${module.environment.account_ids.hmpps-domain-services-test}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.corporate-staff-rostering-development}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.corporate-staff-rostering-test}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.planetfm-development}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.planetfm-test}:role/EC2HmppsDomainSecretsRole",
     ]
     preproduction = []
     production = [
       "arn:aws:iam::${module.environment.account_ids.hmpps-domain-services-preproduction}:role/EC2HmppsDomainSecretsRole",
       "arn:aws:iam::${module.environment.account_ids.hmpps-domain-services-production}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.corporate-staff-rostering-preproduction}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.corporate-staff-rostering-production}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.planetfm-preproduction}:role/EC2HmppsDomainSecretsRole",
+      "arn:aws:iam::${module.environment.account_ids.planetfm-production}:role/EC2HmppsDomainSecretsRole",
     ]
   }