feat!: Replace the use of aws-auth configmap with EKS cluster access entry (#2858)

* feat: Replace `resolve_conflicts` with `resolve_conflicts_on_create`/`delete`; raise MSV of AWS provider to `v5.0` to support

* fix: Replace dynamic DNS suffix for `sts:AssumeRole` API calls for static suffix

* feat: Add module tag

* feat: Align Karpenter permissions with Karpenter v1beta1/v0.32 permissions from upstream

* refactor: Move `aws-auth` ConfigMap functionality to its own sub-module

* chore: Update examples

* feat: Add state `moved` block for Karpenter Pod Identity role re-name

* fix: Correct variable `create` description

* feat: Add support for cluster access entries

* chore: Bump MSV of Terraform to `1.3`

* fix: Replace defunct kubectl provider with an updated forked equivalent

* chore: Update and validate examples for access entry; clean up provider usage

* docs: Correct double redundant variable descriptions

* feat: Add support for Cloudwatch log group class argument

* fix: Update usage tag placement, fix Karpenter event spelling, add upcoming changes section to upgrade guide

* feat: Update Karpenter module to generalize naming used and align policy with the upstream Karpenter policy

* feat: Add native support for Windows based managed nodegroups similar to AL2 and Bottlerocket

* feat: Update self-managed nodegroup module to use latest features of ASG

* docs: Update and simplify docs

* fix: Correct variable description for AMI types

* fix: Update upgrade guide with changes; rename Karpenter controller resource names to support migrating for users

* docs: Complete upgrade guide docs for migration and changes applied

* Update examples/karpenter/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

* Update examples/outposts/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

* Update modules/karpenter/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

---------

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

templates/aws_auth_cm.tpl

@@ -1,37 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: aws-auth
-  namespace: kube-system
-data:
-  mapRoles: |
-%{ for role in eks_managed_role_arns ~}
-    - rolearn: ${role}
-      username: system:node:{{EC2PrivateDNSName}}
-      groups:
-        - system:bootstrappers
-        - system:nodes
-%{ endfor ~}
-%{ for role in self_managed_role_arns ~}
-    - rolearn: ${role}
-      username: system:node:{{EC2PrivateDNSName}}
-      groups:
-        - system:bootstrappers
-        - system:nodes
-%{ endfor ~}
-%{ for role in win32_self_managed_role_arns ~}
-    - rolearn: ${role}
-      username: system:node:{{EC2PrivateDNSName}}
-      groups:
-        - eks:kube-proxy-windows
-        - system:bootstrappers
-        - system:nodes
-%{ endfor ~}
-%{ for role in fargate_profile_pod_execution_role_arns ~}
-    - rolearn: ${role}
-      username: system:node:{{SessionName}}
-      groups:
-        - system:bootstrappers
-        - system:nodes
-        - system:node-proxier
-%{ endfor ~}

templates/windows_user_data.tpl

@@ -1,5 +1,8 @@
+%{ if enable_bootstrap_user_data ~}
 <powershell>
+%{ endif ~}
 ${pre_bootstrap_user_data ~}
+%{ if enable_bootstrap_user_data ~}
 [string]$EKSBinDir = "$env:ProgramFiles\Amazon\EKS"
 [string]$EKSBootstrapScriptName = 'Start-EKSBootstrap.ps1'
 [string]$EKSBootstrapScriptFile = "$EKSBinDir\$EKSBootstrapScriptName"
@@ -7,3 +10,4 @@ ${pre_bootstrap_user_data ~}
 $LastError = if ($?) { 0 } else { $Error[0].Exception.HResult }
 ${post_bootstrap_user_data ~}
 </powershell>
+%{ endif ~}