// eks_cluster.tf - Control Plane HA 구성
resource "aws_eks_cluster" "shorts_production" {
  name     = "shorts-prod-cluster"
  role_arn  = aws_iam_role.eks_cluster.arn
  version  = "1.29"

  vpc_config {
    subnet_ids         = var.private_subnet_ids
    security_group_ids = [aws_security_group.eks.id]
    endpoint_private_access = true
    endpoint_public_access  = false
  }

  // Control Plane 로깅 - 모든 컴포넌트 활성화
  enabled_cluster_log_types = [
    "api", "audit", "authenticator",
    "controllerManager", "scheduler"
  ]

  encryption_config {
    provider {
      key_arn = aws_kms_key.eks_secrets.arn
    }
    resources = ["secrets"]
  }
}