feat: Default to clusters OIDC issuer URL for aws_eks_identity_provider_config (#2190)

feat: setting oidc issuer as default option for aws_eks_identity_provider_config

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
This commit is contained in:
Igor Brites
2022-08-09 15:06:39 -04:00
committed by GitHub
parent 6d3fc1b93a
commit 93065fabdf
2 changed files with 8 additions and 1 deletions

View File

@@ -196,6 +196,13 @@ module "eks" {
} }
} }
# OIDC Identity provider
cluster_identity_providers = {
sts = {
client_id = "sts.amazonaws.com"
}
}
# aws-auth configmap # aws-auth configmap
manage_aws_auth_configmap = true manage_aws_auth_configmap = true

View File

@@ -369,7 +369,7 @@ resource "aws_eks_identity_provider_config" "this" {
groups_claim = lookup(each.value, "groups_claim", null) groups_claim = lookup(each.value, "groups_claim", null)
groups_prefix = lookup(each.value, "groups_prefix", null) groups_prefix = lookup(each.value, "groups_prefix", null)
identity_provider_config_name = try(each.value.identity_provider_config_name, each.key) identity_provider_config_name = try(each.value.identity_provider_config_name, each.key)
issuer_url = each.value.issuer_url issuer_url = try(each.value.issuer_url, aws_eks_cluster.this[0].identity[0].oidc[0].issuer)
required_claims = lookup(each.value, "required_claims", null) required_claims = lookup(each.value, "required_claims", null)
username_claim = lookup(each.value, "username_claim", null) username_claim = lookup(each.value, "username_claim", null)
username_prefix = lookup(each.value, "username_prefix", null) username_prefix = lookup(each.value, "username_prefix", null)