resource "aws_eks_cluster" "sme-label-copy-schedule-dev-use1-cluster-01" {
  # checkov:skip=CKV2_AWS_30:Ensure AWS EKS Cluster Secrets are encrypted
  # checkov:skip=CKV_AWS_293:Ensure that EKS cluster uses a supported Kubernetes version
  enabled_cluster_log_types = [
    "api",
    "audit",
    "authenticator",
    "controllerManager",
    "scheduler",
  ]
  name     = "sme-label-copy-schedule-dev-use1-cluster-01"
  role_arn = "arn:aws:iam::230315258045:role/lcsd-EKS-Service-Role"
  tags = {
    "Business_unit" = "GRPS"
    "Environment"   = "Dev"
    "Name"          = "sme-label-copy-schedule-dev-use1-cluster-01"
    "Owner"         = "Richard Mayer"
    "Project_code"  = "2000-0497G"
    "Project_name"  = "GRPS"
    "Terraform"     = "True"
    "Team-Name"     = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR"
  }
  tags_all = {
    "Business_unit" = "GRPS"
    "Environment"   = "Dev"
    "Name"          = "sme-label-copy-schedule-dev-use1-cluster-01"
    "Owner"         = "Richard Mayer"
    "Project_code"  = "2000-0497G"
    "Project_name"  = "GRPS"
    "Terraform"     = "True"
    "Team-Name"     = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR"
  }
  version = "1.32"

  encryption_config {
    resources = [
      "secrets",
    ]

    provider {
      key_arn = "arn:aws:kms:us-east-1:230315258045:key/16bbe348-782e-4a80-a279-ab0326680f2b"
    }
  }

  kubernetes_network_config {
    ip_family         = "ipv4"
    service_ipv4_cidr = "172.20.0.0/16"
    service_ipv6_cidr = null
  }

  vpc_config {
    endpoint_private_access = true
    endpoint_public_access  = false
    public_access_cidrs     = []
    security_group_ids = [
      "sg-0eac7d2ef175a4339",
    ]
    subnet_ids = [
      "subnet-02bf9031b919d05ed",
      "subnet-05c993a63978c127d",
    ]
  }
}