# aws_eks_cluster.dsrv-dev-eks-cluster:
resource "aws_eks_cluster" "dsrv-dev-eks-cluster" {
  enabled_cluster_log_types = [
    "api",
    "audit",
    "authenticator",
    "controllerManager",
    "scheduler",
  ]
  name     = "dsrv-dev-eks-cluster"
  role_arn = "arn:aws:iam::058029036333:role/deld-EKS-Service-Role"
  tags = {
    "AWS.SSM.AppManager.EKS.Cluster.ARN" = "arn:aws:eks:eu-central-1:058029036333:cluster/dsrv-dev-eks-cluster"
  }
  tags_all = {
    "AWS.SSM.AppManager.EKS.Cluster.ARN" = "arn:aws:eks:eu-central-1:058029036333:cluster/dsrv-dev-eks-cluster"
  }
  version = "1.35"

  encryption_config {
    resources = [
      "secrets",
    ]

    provider {
      key_arn = "arn:aws:kms:eu-central-1:058029036333:key/47961108-0fc7-4664-856a-2fd7921c4aa3"
    }
  }
  kubernetes_network_config {
    ip_family         = "ipv4"
    service_ipv4_cidr = "172.20.0.0/16"
  }

  vpc_config {
    endpoint_private_access = true
    endpoint_public_access  = false
    public_access_cidrs     = []
    security_group_ids = [
      "sg-0a3f27085e9acc60b",
    ]
    subnet_ids = [
      "subnet-056c93a7f46be0401",
      "subnet-0f5a61cb78241c5fc",
    ]
  }
}
