resource "oci_identity_policy" "oke_all_policy" {
  compartment_id = var.tenancy_ocid
  name           = "policy-oke-${var.oke_cluster_name}"
  description    = "Todas as permissoes necessarias para o Cluster ${var.oke_cluster_name}."
  statements     = local.oke_all_policy_statements

  freeform_tags = {
    "ManagedBy" = "Terraform"
  }
}

resource "oci_identity_dynamic_group" "oke_nodes_dynamic_group" {
  compartment_id = var.tenancy_ocid
  name           = "dg-oke-nodes-${var.oke_cluster_name}"
  description    = "Dynamic Group para os Worker Nodes do OKE executarem o Autoscaler"
  matching_rule  = "ALL {instance.compartment.id = '${var.oke_compartment}'}"

  freeform_tags = {
    "ManagedBy" = "Terraform"
  }
}