AWS Terraform K8s Cilium Cluster

I need a reusable Terraform script that spins up a production-ready Kubernetes cluster on AWS from scratch. You will receive full administrative access to the account, so you are free to create any VPCs, IAM roles, and security components the solution needs.

Core requirements
• Oracle Linux 9 for all control-plane and worker nodes
• Cilium as the only CNI, with WireGuard encryption turned on for all pod-to-pod traffic
• Terraform modules structured clearly so I can tweak region, instance types, and scaling parameters without touching the core logic
• A minimal demo workload that lets me verify Cilium is working (the cluster’s initial purpose is to run test cases focused on Cilium functionality)

Deliverables
1. Terraform code (HCL) with clear variable definitions and outputs
2. A README that explains prerequisite tooling, one-command deployment, and teardown steps
3. Sample `kubectl` commands or manifests that demonstrate WireGuard-encrypted traffic flowing through Cilium

Acceptance criteria
• `terraform apply` provisions the entire stack without manual steps
• `kubectl get nodes` shows Oracle Linux 9 across all nodes
• `cilium status` returns Healthy and encryption type WireGuard
• A simple pod-to-pod connectivity test confirms encrypted traffic

Please keep the script clean, modular, and production-grade. Let me know if you need any additional details before you start.