♻️ refactor(dns): refactor to use tf native

README.md

@@ -104,7 +104,6 @@ have a istio proxy configured, prevent communication with that pod.)
 | [helm_release.ingress](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
 | [helm_release.istiod](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
 | [kubernetes_namespace.ns](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |
-| [kubernetes_service.apiserver](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/data-sources/service) | data source |
 
 ## Inputs
 
@@ -116,6 +115,7 @@ have a istio proxy configured, prevent communication with that pod.)
 | <a name="input_extra_listener_ports"></a> [extra\_listener\_ports](#input\_extra\_listener\_ports) | A list of additional ports that the ingress load balancer should listen to, 9094 for kafka as an example. | <pre>list(object({<br>    name = string<br>    port = string<br>  }))</pre> | `[]` | no |
 | <a name="input_istio_chart_version"></a> [istio\_chart\_version](#input\_istio\_chart\_version) | The version of istio to install into the cluster. | `string` | `"1.22.3"` | no |
 | <a name="input_istio_version"></a> [istio\_version](#input\_istio\_version) | The version of istio to install into the cluster. | `string` | `"1.22.3"` | no |
+| <a name="input_kubernetes_service_apiserver"></a> [kubernetes\_service\_apiserver](#input\_kubernetes\_service\_apiserver) | Use to exclude internal API service traffic from the service mesh; it should not change but could be necessary to lookup | `string` | `"172.20.0.1"` | no |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | The namespace to install the istio components. Defaults to 'istio-system' | `string` | `"istio-system"` | no |
 | <a name="input_profile"></a> [profile](#input\_profile) | AWS\_PROFILE to use to apply the terraform script. | `string` | `""` | no |
 | <a name="input_region"></a> [region](#input\_region) | The region in which the cluster is running. | `string` | n/a | yes |
@@ -125,6 +125,7 @@ have a istio proxy configured, prevent communication with that pod.)
 
 | Name | Description |
 |------|-------------|
+| <a name="output_istio_namespace"></a> [istio\_namespace](#output\_istio\_namespace) | The namespace used by istio. |
 | <a name="output_module_name"></a> [module\_name](#output\_module\_name) | The name of this module. |
 | <a name="output_module_version"></a> [module\_version](#output\_module\_version) | The version of this module. |
 <!-- END_TF_DOCS -->

main.tf

@@ -187,16 +187,3 @@ resource "helm_release" "egress" {
 
   timeout = 90
 }
-
-###################################################################
-# INGRESS NLB DATA
-###################################################################
-
-# We need to lookup the DNS entry for the istio ingress load balancer
-# This value is used to create the CNAME record for cluster app/api addressing in the DNS module
-# We use this external data source to avoid issues with running plans
-data "external" "load_balancer_dns" {
-  depends_on = [helm_release.ingress]
-
-  program    = ["bash", "${path.module}/load_balancer_dns.sh", format("%v-%v", var.cluster_name, "istio-ingress")]
-}

outputs.tf

@@ -12,7 +12,7 @@ output "module_version" {
   value       = local.module_version
 }
 
-output "istio_ingress_lb" {
-  description = "The Istio ingress network load balancer."
-  value       = data.external.load_balancer_dns.result.dnsName
-}
+output "istio_namespace" {
+  description = "The namespace used by istio."
+  value       = kubernetes_namespace.ns.metadata[0].name
+}

variables.tf

@@ -67,4 +67,4 @@ variable "kubernetes_service_apiserver" {
   description = "Use to exclude internal API service traffic from the service mesh; it should not change but could be necessary to lookup"
   type        = string
   default     = "172.20.0.1"
-}
+}