fix: Ensure a default ip_family value is provided to guarantee a CNI policy is attached to nodes (#2967)

examples/eks_managed_node_group/main.tf

@@ -364,7 +364,7 @@ module "eks_managed_node_group" {
   subnet_ids                        = module.vpc.private_subnets
   cluster_primary_security_group_id = module.eks.cluster_primary_security_group_id
   vpc_security_group_ids = [
-    module.eks.cluster_security_group_id,
+    module.eks.node_security_group_id,
   ]
 
   ami_type = "BOTTLEROCKET_x86_64"

examples/karpenter/main.tf

@@ -181,6 +181,11 @@ resource "helm_release" "karpenter" {
     serviceAccount:
       annotations:
         eks.amazonaws.com/role-arn: ${module.karpenter.iam_role_arn}
+    tolerations:
+      - key: 'eks.amazonaws.com/compute-type'
+        operator: Equal
+        value: fargate
+        effect: "NoSchedule"
     EOT
   ]
 }