From 157ea0c0ad1ba0c6d7870ed94a2a9d1064fe971a Mon Sep 17 00:00:00 2001
From: David Spielmann <david.spielmann@unisg.ch>
Date: Sun, 3 May 2026 20:41:25 +0200
Subject: [PATCH] Use ephemeral EKS cluster auth token

---
 infra/terraform/main.tf     | 8 ++++----
 infra/terraform/versions.tf | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/infra/terraform/main.tf b/infra/terraform/main.tf
index 253881867..70a5d3acc 100644
--- a/infra/terraform/main.tf
+++ b/infra/terraform/main.tf
@@ -1,4 +1,4 @@
-data "aws_eks_cluster_auth" "this" {
+ephemeral "aws_eks_cluster_auth" "this" {
   name = module.eks.cluster_name
 }
 
@@ -127,20 +127,20 @@ provider "aws" {
 provider "kubernetes" {
   host                   = module.eks.cluster_endpoint
   cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)
-  token                  = data.aws_eks_cluster_auth.this.token
+  token                  = ephemeral.aws_eks_cluster_auth.this.token
 }
 
 provider "helm" {
   kubernetes {
     host                   = module.eks.cluster_endpoint
     cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)
-    token                  = data.aws_eks_cluster_auth.this.token
+    token                  = ephemeral.aws_eks_cluster_auth.this.token
   }
 }
 provider "kubectl" {
   apply_retry_count      = 30
   host                   = module.eks.cluster_endpoint
   cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)
-  token                  = data.aws_eks_cluster_auth.this.token
+  token                  = ephemeral.aws_eks_cluster_auth.this.token
   load_config_file       = false
 }
diff --git a/infra/terraform/versions.tf b/infra/terraform/versions.tf
index 1c8a7d6fd..caeaee59f 100644
--- a/infra/terraform/versions.tf
+++ b/infra/terraform/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.8.0"
+  required_version = ">= 1.10.0"
 
   required_providers {
     aws = {