# aws_eks_cluster.global-ds-prod:
resource "aws_eks_cluster" "global-ds-prod" {
  role_arn = "arn:aws:iam::635220336377:role/GDS-P-EKS-Service-Role"
  enabled_cluster_log_types = [
    "api",
    "audit",
    "authenticator",
    "controllerManager",
    "scheduler",
  ]
  name     = "global-ds-prod"
  tags     = {}
  tags_all = {}
  version  = "1.32"

  encryption_config {
    resources = [
      "secrets",
    ]

    provider {
      key_arn = "arn:aws:kms:eu-central-1:635220336377:key/54724efa-0f68-42dd-b2e8-76b22d626766"
    }
  }

  kubernetes_network_config {
    ip_family         = "ipv4"
    service_ipv4_cidr = "172.20.0.0/16"
    service_ipv6_cidr = null
  }

  vpc_config {
    endpoint_private_access = true
    endpoint_public_access  = false
    public_access_cidrs     = []
    security_group_ids = [
      "sg-0a7040e7dace06f2c",
    ]
    subnet_ids = [
      "subnet-0b4edc28f27b06d10",
      "subnet-0e87fca7441f7f129",
    ]
  }
}