# Default role mapping for engineering users.
resource "opensearch_roles_mapping" "default_role_mapping" {
  role_name   = resource.opensearch_role.default_role.role_name
  description = "Give engineer users permission to access all indexes."
  users = [
    resource.opensearch_user.npatel_user.username,
  ]
}

# RW permission for product, track and project indexes.
resource "opensearch_roles_mapping" "product_track_project_index_rw" {
  role_name   = resource.opensearch_role.product_track_project_index_rw.role_name
  description = "Give content_search_kc_user RW permission to all product, track and project alias"
  users = [
    resource.opensearch_user.content_search_kc_user.username,
    resource.opensearch_user.ar_search_ingest_user.username
  ]
}

# Read+Search permission for product, track and project indexes.
resource "opensearch_roles_mapping" "product_track_project_read_search" {
  role_name   = resource.opensearch_role.product_track_project_read_search.role_name
  description = "Give users RS permission to product, track and project alias"
  users = [
    resource.opensearch_user.gql_product_user.username
  ]
}