resource "opensearch_roles_mapping" "label_participant_index_rw_role_mapping" {
  role_name   = resource.opensearch_role.label_participant_index_rw.role_name
  description = "Give label_participant_kc_user RW permission to label_participant_write alias"
  users = [
    resource.opensearch_user.label_participant_kc_user.username
  ]
}
resource "opensearch_roles_mapping" "global_participant_index_rw_role_mapping" {
  role_name   = resource.opensearch_role.global_participant_index_rw.role_name
  description = "Give label_participant_kc_user RW permission to global_participant_write alias"
  users = [
    resource.opensearch_user.global_participant_kc_user.username
  ]
}
resource "opensearch_roles_mapping" "global_sound_recording_index_rw_role_mapping" {
  role_name   = resource.opensearch_role.global_sound_recording_index_rw.role_name
  description = "Give label_participant_kc_user RW permission to global_sound_recording_write alias"
  users = [
    resource.opensearch_user.global_sound_recording_kc_user.username
  ]
}

resource "opensearch_roles_mapping" "read_search_all_index_role_mapping" {
  role_name   = resource.opensearch_role.read_search_all_index.role_name
  description = "Give gql_knowledge_search_user permission to read and search all indexes."
  users = [
    resource.opensearch_user.gql_knowledge_search_user.username
  ]
}

resource "opensearch_roles_mapping" "default_role_mapping" {
  role_name   = resource.opensearch_role.default_role.role_name
  description = "Give engineer users permission to access all indexes."
  users = [
    resource.opensearch_user.rtorres_user.username,
    resource.opensearch_user.gaguirre_user.username,
    resource.opensearch_user.bburton_user.username,
    resource.opensearch_user.tcalhoun_user.username,
    resource.opensearch_user.cbeesley_user.username,
    resource.opensearch_user.smartin_user.username,
    resource.opensearch_user.anevrekar_user.username,
  ]
}

resource "opensearch_roles_mapping" "reindex_role_mapping" {
  role_name   = resource.opensearch_role.reindex_role.role_name
  description = "Allows users to perform reindex operations"
  users = [
    resource.opensearch_user.rtorres_user.username,
  ]
}