From fa6391a194d3bfcbc986ef4b9cc5cdbd1be455f9 Mon Sep 17 00:00:00 2001
From: Kyle Goyette <kyle@wandb.com>
Date: Wed, 11 Dec 2024 09:00:23 -0800
Subject: [PATCH 1/3] remove

---
 main.tf      | 2 +-
 variables.tf | 9 ---------
 2 files changed, 1 insertion(+), 10 deletions(-)

diff --git a/main.tf b/main.tf
index 83013d2..1dff4c1 100644
--- a/main.tf
+++ b/main.tf
@@ -343,7 +343,7 @@ module "wandb" {
         internalJWTMap = [
           {
             subject = "system:serviceaccount:default:${local.weave_trace_service_account_name}",
-            issuer = var.kubernetes_cluster_oidc_issuer_url
+            issuer = azurerm_kubernetes_cluster.cluster.oidc_issuer_url
           }
         ]
       }
diff --git a/variables.tf b/variables.tf
index 6db34dd..6ff59d7 100644
--- a/variables.tf
+++ b/variables.tf
@@ -337,12 +337,3 @@ variable "clickhouse_region" {
   description = "ClickHouse region (eastus2, westus3, etc)."
   default     = ""
 }
-
-###########################################
-# Internal Service                        #
-###########################################
-variable "kubernetes_cluster_oidc_issuer_url" {
-  type        = string
-  description = "OIDC issuer URL for the Kubernetes cluster. Can be determined using `kubectl get --raw /.well-known/openid-configuration`"
-  default     = ""
-}

From 55224726cb780eaedb8da953b601e1729f9c99d9 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Wed, 11 Dec 2024 17:01:38 +0000
Subject: [PATCH 2/3] terraform-docs: automated action

---
 README.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/README.md b/README.md
index 22a04a4..94657b6 100644
--- a/README.md
+++ b/README.md
@@ -111,7 +111,6 @@ resources that lack official modules.
 | <a name="input_enable_database_vault_key"></a> [enable\_database\_vault\_key](#input\_enable\_database\_vault\_key) | Flag to enable managed key encryption for the database. Once enabled, cannot be disabled. | `bool` | `false` | no |
 | <a name="input_enable_storage_vault_key"></a> [enable\_storage\_vault\_key](#input\_enable\_storage\_vault\_key) | Flag to enable managed key encryption for the storage account. | `bool` | `false` | no |
 | <a name="input_external_bucket"></a> [external\_bucket](#input\_external\_bucket) | config an external bucket | `any` | `null` | no |
-| <a name="input_kubernetes_cluster_oidc_issuer_url"></a> [kubernetes\_cluster\_oidc\_issuer\_url](#input\_kubernetes\_cluster\_oidc\_issuer\_url) | OIDC issuer URL for the Kubernetes cluster. Can be determined using `kubectl get --raw /.well-known/openid-configuration` | `string` | `""` | no |
 | <a name="input_kubernetes_instance_type"></a> [kubernetes\_instance\_type](#input\_kubernetes\_instance\_type) | Instance type for primary node group. Defaults to null and value from deployment-size.tf is used | `string` | `null` | no |
 | <a name="input_kubernetes_max_node_per_az"></a> [kubernetes\_max\_node\_per\_az](#input\_kubernetes\_max\_node\_per\_az) | Maximum number of nodes for the AKS cluster. Defaults to null and value from deployment-size.tf is used | `number` | `null` | no |
 | <a name="input_kubernetes_min_node_per_az"></a> [kubernetes\_min\_node\_per\_az](#input\_kubernetes\_min\_node\_per\_az) | Minimum number of nodes for the AKS cluster. Defaults to null and value from deployment-size.tf is used | `number` | `null` | no |

From 8f423d4fd773610ee8bd667e1248437961bdf106 Mon Sep 17 00:00:00 2001
From: Kyle Goyette <kyle@wandb.com>
Date: Wed, 11 Dec 2024 09:03:08 -0800
Subject: [PATCH 3/3] use resource

---
 main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/main.tf b/main.tf
index 1dff4c1..92e6fae 100644
--- a/main.tf
+++ b/main.tf
@@ -343,7 +343,7 @@ module "wandb" {
         internalJWTMap = [
           {
             subject = "system:serviceaccount:default:${local.weave_trace_service_account_name}",
-            issuer = azurerm_kubernetes_cluster.cluster.oidc_issuer_url
+            issuer = module.app_aks.oidc_issuer_url
           }
         ]
       }