github-mirrors/terraform-aws-eks
1
0
Fork 0
mirror of https://github.com/ysoftdevs/terraform-aws-eks.git synced 2026-01-16 16:47:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: Only include CA thumbprint in OIDC provider list (#2769)

Browse Source 
As per #2732 and #32847, only the CA thumbprint should be included in
the OIDC provider thumbprint list.
This commit is contained in:
Daniel Frankcom
2023-10-06 16:26:35 -07:00
committed by GitHub
parent 386535f6c5
commit 7e5de1566c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
main.tf
View File

@@ -232,7 +232,7 @@ resource "aws_iam_openid_connect_provider" "oidc_provider" {
count = local.create && var.enable_irsa && !local.create_outposts_local_cluster ? 1 : 0 count = local.create && var.enable_irsa && !local.create_outposts_local_cluster ? 1 : 0
client_id_list = distinct(compact(concat(["sts.${local.dns_suffix}"], var.openid_connect_audiences))) client_id_list = distinct(compact(concat(["sts.${local.dns_suffix}"], var.openid_connect_audiences)))
thumbprint_list = concat(data.tls_certificate.this[0].certificates[*].sha1_fingerprint, var.custom_oidc_thumbprints) thumbprint_list = concat([data.tls_certificate.this[0].certificates[0].sha1_fingerprint], var.custom_oidc_thumbprints)
url = aws_eks_cluster.this[0].identity[0].oidc[0].issuer url = aws_eks_cluster.this[0].identity[0].oidc[0].issuer
tags = merge( tags = merge(