terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "~>4.11"
    }
    tls = {
      source  = "hashicorp/tls"
      version = "~>4.0"
    }
  }
  backend "azurerm" {}
}
provider "aws" {
  region = "us-west-2"
}
provider "azurerm" {
  features {
    resource_group {
      prevent_deletion_if_contains_resources = false
    }
  }
}

variable "aks_oidc" {
  type = string
}

data "tls_certificate" "oidc" {
  url = "https://${var.aks_oidc}"
}

resource "aws_iam_openid_connect_provider" "oidc" {
  client_id_list = ["sts.amazonaws.com"]
  thumbprint_list = [data.tls_certificate.oidc.certificates[0].sha1_fingerprint]
  url = "https://${var.aks_oidc}"
}

output "oidc_arn" {
  value = aws_iam_openid_connect_provider.oidc.arn
}