data "aws_eks_cluster" "amp-prod-as-eks" {
  name = "amp-prod-as-eks"
}

data "aws_eks_cluster_auth" "amp-prod-as-eks" {
  name = "amp-prod-as-eks"
}

resource "aws_eks_cluster" "amp-prod-as-eks" {
  #checkov:skip=CKV_AWS_58: Ensure EKS Cluster has Secrets Encryption Enabled. Migrated existing cluster as-is; encryption_config managed via variables.
  name                      = "amp-prod-as-eks"
  version                   = var.eks_version
  role_arn                  = var.eks_cluster_role_arn
  enabled_cluster_log_types = var.enabled_cluster_log_types
  encryption_config {
    resources = var.encryption_config_resources
    provider {
      key_arn = var.encryption_config_provider_key_arn
    }
  }
  vpc_config {
    endpoint_private_access = var.vpc_config_endpoint_private_access
    endpoint_public_access  = var.vpc_config_endpoint_public_access
    security_group_ids = [
      aws_security_group.AMPP-EKS-Cluster-SG.id
    ]
    subnet_ids = [aws_subnet.subnet-0080604b4fb52d359.id, aws_subnet.subnet-0ff4e20d7cd590b0b.id]
  }
  tags = merge(var.tags, { Name = "amp-prod-as-eks" })
}

resource "kubernetes_namespace" "amp-prod-as" {
  metadata {
    name = "amp-prod-as"
    labels = {
      "elbv2.k8s.aws/pod-readiness-gate-inject" = "enabled"
    }
  }
}

resource "kubernetes_namespace" "amino-prod-as" {
  metadata {
    name = "amino-prod-as"
  }
}

resource "kubernetes_namespace" "datadog" {
  metadata {
    name = "datadog"
  }
}