AuthN Plumbing to live-build on EKS

provder.tf

/*
  AuthN Configuration for EKS
    This config solves the issue of pre-configuring cluster credentials before the cluster is built.
*/

### Discover the Cluster Token for AuthN
data "aws_eks_cluster_auth" "cluster_auth" {
  name = module.eks.cluster_name
}

### AuthN: Helm <> EKS
# So Helm Can Install Charts
provider "helm" {
  kubernetes {
    host                   = module.eks.cluster_endpoint
    cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)
    token                  = data.aws_eks_cluster_auth.cluster_auth.token
  }
}

### AuthN: Terraform <> EKS
# https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs
# https://github.com/hashicorp/terraform-provider-kubernetes/releases
provider "kubernetes" {
  host                   = module.eks.cluster_endpoint
  cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)

  exec {
    api_version = "client.authentication.k8s.io/v1"
    command     = "aws"
    # This requires the awscli to be installed locally where Terraform is executed
    args = ["eks", "get-token", "--cluster-name", module.eks.cluster_name]
  }
}