Scheduling router pods on infra nodes can be improved with the following config instead of the service account

[nvnmandadhi]

resource "local_file" "ingress_controller_config" {
  depends_on = [
    null_resource.generate_manifests
  ]

  filename        = "${path.root}/clusterconfig/openshift/99_cluster-ingress-controller.yml"
  file_permission = "0644"

  content = <<-EOT
apiVersion: operator.openshift.io/v1
kind: IngressController
metadata:
  name: default
  namespace: openshift-ingress-operator
spec:
  domain: apps.${var.cluster_name}.${var.base_domain}
  endpointPublishingStrategy:
    type: LoadBalancerService
    loadBalancer:
      scope: External
  nodePlacement:
    nodeSelector:
      matchLabels:
        node-role.kubernetes.io/infra: ""
  replicas: ${length(var.availability_zones)}
EOT
}