terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
    tls = {
      source  = "hashicorp/tls"
      version = "~>4.0"
    }
  }
  backend "oss" {
    profile = "default"
  }
}

provider "aws" {
  region = "us-east-1"
}

variable "oidc_isser" {
  type = string
}

variable "auto_deploy_owner_tag" {
  type = string
}

data "tls_certificate" "oidc" {
  url = var.oidc_isser
}

resource "aws_iam_openid_connect_provider" "oidc" {
  client_id_list = ["sts.amazonaws.com"]
  thumbprint_list = [data.tls_certificate.oidc.certificates[0].sha1_fingerprint]
  url = var.oidc_isser
  tags = {
    "tidbcloud-auto-deploy-owner" = var.auto_deploy_owner_tag,
  }
}

output "oidc_arn" {
  value = aws_iam_openid_connect_provider.oidc.arn
}