change conditional for irsa.tf (terraform-aws-modules#783)

calm · Mar 12, 2020 · 4c0c4c4 · 4c0c4c4
1 parent 2a78825
commit 4c0c4c4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -18,6 +18,7 @@ project adheres to [Semantic Versioning](http://semver.org/).
 - Add `default_cooldown` and `health_check_grace_period` options to workers ASG (by @ArieLevs)
 - Fix support for ASG max instance lifetime for workers (by @barryib)
 - Add support for envelope encryption of Secrets (by @babilen5)
+- Fix issue with terraform plan phase when IRSA was enabled and create_eks switches to false (by @daroga0002)
 - **Breaking:** Added support for EKS 1.15 (by @sc250024)
 
 # History

diff --git a/irsa.tf b/irsa.tf
@@ -8,7 +8,7 @@
 # https://github.com/terraform-providers/terraform-provider-aws/issues/10104
 
 resource "aws_iam_openid_connect_provider" "oidc_provider" {
-  count           = var.enable_irsa ? 1 : 0
+  count           = var.enable_irsa && var.create_eks ? 1 : 0
   client_id_list  = ["sts.amazonaws.com"]
   thumbprint_list = [var.eks_oidc_root_ca_thumbprint]
   url             = flatten(concat(aws_eks_cluster.this[*].identity[*].oidc.0.issuer, [""]))[0]