Fixed check

modules/aws/volume-access/check_oidc_providers.sh

@@ -0,0 +1,14 @@
+#/bin/bash
+set -e
+eval "$(jq -r '@sh "ACCOUNT_ID=\(.account_id) OIDC_PROVIDERS_STR=\(.oidc_providers_str)"')"
+
+my_array=($OIDC_PROVIDERS_STR)
+result=""
+for each in "${my_array[@]}"
+do
+    value=$(aws iam list-open-id-connect-providers --query "OpenIDConnectProviderList[?Arn == 'arn:aws:iam::${ACCOUNT_ID}:oidc-provider/$each']" --output text)
+    if [ -z "$value" ]; then
+        result="$result $each"
+    fi
+done
+jq -n --arg result "$result" '{"oidc_providers":$result}'

modules/aws/volume-access/main.tf

@@ -28,11 +28,24 @@ locals {
   ]
 }
 
-resource "aws_iam_openid_connect_provider" "streamnative_oidc_providers" {
-  count          = length(local.oidc_providers)
-  url            = "https://${var.oidc_providers[count.index]}"
+data "external" "check_oidc_provider" {
+  program = ["bash", "${path.module}/check_oidc_providers.sh"]
+  query = {
+    account_id = local.account_id
+    oidc_providers_str = join(" ", local.oidc_providers)
+  }
+}
+
+locals {
+  provider_not_exists = compact(split(" ", data.external.check_oidc_provider.result.oidc_providers))
+}
+
+resource "aws_iam_openid_connect_provider" "oidc_provider" {
+  count          = length(local.provider_not_exists)
+  url            = "https://${local.provider_not_exists[count.index]}"
   client_id_list = ["sts.amazonaws.com"]
   tags           = local.tag_set
+  depends_on = [data.external.check_oidc_provider]
 }
 
 data "aws_iam_policy_document" "streamnative_management_access" {