[solve:issue-892]fix: split in two policy statements

[snifbr]

Hi, this Pull Request is a propose to solve issue #892 .

close #892

[oracle-contributor-agreement]

Thank you for your pull request and welcome to our community! To contribute, please sign the Oracle Contributor Agreement (OCA).
The following contributors of this PR have not signed the OCA:

• PR author: snifbr
• [email protected]

To sign the OCA, please create an Oracle account and sign the OCA in Oracle's Contributor Agreement Application.

When signing the OCA, please provide your GitHub username. After signing the OCA and getting an OCA approval from Oracle, this PR will be automatically updated.

If you are an Oracle employee, please make sure that you are a member of the main Oracle GitHub organization, and your membership in this organization is public.

[oracle-contributor-agreement]

Thank you for signing the OCA.

[hyder]

I think there's still a permission issue. Is this the error you are running into:

nodepool, action: CREATED. Message: Invalid COMPUTE_INSTANCE: Authorization failed or requested resource not found while provisioning node(s)
│ Resource OCID: ocid1.nodepool.oc1......
│ Suggestion: Please retry or contact support for help with service: Containerengine Node Pool
│
│
│   with module.workers[0].oci_containerengine_node_pool.workers["np1"],
│   on modules/workers/nodepools.tf line 5, in resource "oci_containerengine_node_pool" "workers":
│    5: resource "oci_containerengine_node_pool" "workers" {

[snifbr]

I think there's still a permission issue. Is this the error you are running into:

nodepool, action: CREATED. Message: Invalid COMPUTE_INSTANCE: Authorization failed or requested resource not found while provisioning node(s)
│ Resource OCID: ocid1.nodepool.oc1......
│ Suggestion: Please retry or contact support for help with service: Containerengine Node Pool
│
│
│   with module.workers[0].oci_containerengine_node_pool.workers["np1"],
│   on modules/workers/nodepools.tf line 5, in resource "oci_containerengine_node_pool" "workers":
│    5: resource "oci_containerengine_node_pool" "workers" {

Hi @hyder , my problem is other than this.

Below is the error I'm running into:

module.iam.oci_identity_policy.cluster[0]: Still creating... [2m0s elapsed]                                                                                                                                    
╷                                                                                                                                                                                                              
│ Error: 409-PolicyAlreadyExists, Policy 'oke-cluster-glqyop' already exists                                                                                                                                   
│ Suggestion: The resource is in a conflicted state. Please retry again or contact support for help with service: Identity Policy                                                                              
│ Documentation: https://registry.terraform.io/providers/oracle/oci/latest/docs/resources/identity_policy                                                                                                      
│ API Reference: https://docs.oracle.com/iaas/api/#/en/identity/20160918/Policy/CreatePolicy                                                                                                                   
│ Request Target: POST https://identity.sa-saopaulo-1.oci.oraclecloud.com/20160918/policies                                                                                                                    
│ Provider version: 5.28.0, released on 2024-02-07.                                                                                                                                                            
│ Service: Identity Policy                                                                                                                                                                                     
│ Operation Name: CreatePolicy                                                                                                                                                                                 
│ OPC request ID: 0681765e82b93cac5b6257f28f98ceec/C7D62792359AB72A8387775A651630FD/E431421C6F470A6AFE56E3A56421E5B3                                                                                           
│                                                                                                                                                                                                              
│                                                                                                                                                                                                              
│   with module.iam.oci_identity_policy.cluster[0],                                                                                                                                                            
│   on modules/iam/policy.tf line 20, in resource "oci_identity_policy" "cluster":                                                                                                                             
│   20: resource "oci_identity_policy" "cluster" {                                                                                                                                                             
│                                                                                                                                                                                                              
╵