Upgrade tool versions

.github/actions/terratest/Dockerfile

@@ -1,10 +1,10 @@
-FROM golang:1.24.1-alpine3.20
+FROM golang:1.25.4-alpine3.22
 
 WORKDIR /
 
-ARG TERRAFORM_VERSION=1.11.3
-ARG KUBECTL_VERSION=1.32.3
-ARG HELM_VERSION=3.17.0
+ARG TERRAFORM_VERSION=1.14.0
+ARG KUBECTL_VERSION=1.34.2
+ARG HELM_VERSION=3.19.0
 
 RUN apk add --no-cache \
       bash \

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: 1.8.1
+          terraform_version: 1.14.0
       - name: 'Terraform Format'
         run: terraform fmt -check -recursive
       - name: 'Terraform Init cluster'

.github/workflows/tfsec_pr_commenter.yml

@@ -9,7 +9,7 @@ jobs:
       - name: Clone repo
         uses: actions/checkout@v4
       - name: trivy
-        uses: reviewdog/action-trivy@v1.13.10
+        uses: reviewdog/action-trivy@v1.14.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           trivy_command: config

.terraform-version

@@ -1 +1 @@
-1.11.3
+1.14.0

README.md

@@ -40,12 +40,11 @@ module "cluster" {
 provider "kubernetes" {
   host                   = module.cluster.config.endpoint
   cluster_ca_certificate = base64decode(module.cluster.config.ca_data)
+  token                  = ephemeral.aws_eks_cluster_auth.auth.token
+}
 
-  exec {
-    api_version = "client.authentication.k8s.io/v1beta1"
-    command     = "aws"
-    args        = ["eks", "get-token", "--cluster-name", module.cluster.config.name]
-  }
+ephemeral "aws_eks_cluster_auth" "auth" {
+  name = module.cluster.config.name
 }
 ```
 

examples/cluster/environment/.terraform-version

@@ -1 +1 @@
-1.2.3
+1.14.0

examples/cluster/main.tf

@@ -6,12 +6,11 @@ provider "aws" {
 provider "kubernetes" {
   host                   = module.cluster.config.endpoint
   cluster_ca_certificate = base64decode(module.cluster.config.ca_data)
+  token                  = ephemeral.aws_eks_cluster_auth.auth.token
+}
 
-  exec {
-    api_version = "client.authentication.k8s.io/v1beta1"
-    command     = "aws"
-    args        = ["eks", "get-token", "--cluster-name", module.cluster.config.name]
-  }
+ephemeral "aws_eks_cluster_auth" "auth" {
+  name = module.cluster.config.name
 }
 
 data "http" "ip" {

main.tf

@@ -140,7 +140,7 @@ data "aws_iam_policy_document" "cloudwatch" {
       identifiers = [
         format(
           "logs.%s.amazonaws.com",
-          data.aws_region.current.name
+          data.aws_region.current.region
         )
       ]
     }
@@ -151,7 +151,7 @@ data "aws_iam_policy_document" "cloudwatch" {
       values = [
         format(
           "arn:aws:logs:%s:%s:log-group:/aws/eks/%s/cluster",
-          data.aws_region.current.name,
+          data.aws_region.current.region,
           data.aws_caller_identity.current.account_id,
           var.name,
         )