data "aws_eks_cluster" "digsysd3-eks" {
  name       = "digsysd3-eks"
  depends_on = [aws_eks_cluster.digsysd3-eks]
}

data "aws_eks_cluster" "digsys-eom-eks" {
  name       = "digsysd3-eks"
  depends_on = [aws_eks_cluster.digsysd3-eks]
}

data "aws_eks_cluster_auth" "digsysd3-eks" {
  name       = "digsysd3-eks"
  depends_on = [aws_eks_cluster.digsysd3-eks]
}

resource "aws_eks_cluster" "digsysd3-eks" {
  #checkov:skip=CKV_AWS_58: Ensure EKS Cluster has Secrets Encryption Enabled
  name                      = "digsysd3-eks"
  version                   = "1.32"
  role_arn                  = var.eks_cluster_role_arn
  enabled_cluster_log_types = var.enabled_cluster_log_types
  encryption_config {
    resources = var.encryption_config_resources
    provider {
      key_arn = var.encryption_config_provider_key_arn
    }
  }
  vpc_config {
    endpoint_private_access = var.vpc_config_endpoint_private_access
    endpoint_public_access  = var.vpc_config_endpoint_public_access
    security_group_ids = [
      aws_security_group.DIGSYS-D3-EKS-Control-Plane-SG.id
    ]
    subnet_ids = [aws_subnet.DIGSYS-D3-XAPP-1A.id, aws_subnet.DIGSYS-D3-XAPP-1B.id]
  }
  tags = merge(var.tags, { Name = "digsysd3-eks" })
}