Terraform: kubectl provider

provider "kubectl" {
 apply_retry_count      = 5
 host                   = module.eks.cluster_endpoint
 cluster_ca_certificate = base64decode(module.eks.cluster_certificate_authority_data)
 load_config_file       = false

 exec {
   api_version = "client.authentication.k8s.io/v1beta1"
   command     = "aws"
   # This requires the awscli to be installed locally where Terraform is executed
   args = ["eks", "get-token", "--cluster-name", module.eks.cluster_name]
 }
}

kubectl: [ cp | config | create | delete | edit | explain | apply | exec | get | set | drain | uncordon | rolling-update | rollout | logs | run | auth | label | annotate | version | top | diff | debug | replace | describe | port-forward | proxy | scale | rollout | api-resources | expose deployment | expose | patch | attach | get endpoints | ~/.kube/config | kubectl logs --help | kubectl --help, kubectl-convert, kubectl autoscale, kubectl.kubernetes.io

Terraform provider: AWS, Cloudflare, GoogleWorkspace, Kubernetes, Helm, .terraform/providers/, template, tfe, providers.tf, dns, hashicorp/, hashicorp/tls, Terraform provider versioning, Libvirt, datadog, terraform providers, required_version, onepassword, rancher2, time, terraform.tf