enable auto-mode on eks (#442)

* enable auto-mode on eks

* enable auto-mode on eks

* Update variables.tf

---------

Co-authored-by: Abhi Yerra <abhi@berkeley.edu>

Author: sohanyadav

cluster.tf

@@ -38,11 +38,43 @@ resource "aws_eks_cluster" "cluster" {
       }
     }
   }
+  # Compute Config (conditional setup for Auto Mode)
+  dynamic "compute_config" {
+    for_each = var.eks_auto_mode_enabled ? [1] : []
+    content {
+      enabled       = true
+      node_pools    = ["system"]
+      node_role_arn = aws_iam_role.node.arn
+    }
+  }
+  # Kubernetes Network Config (Auto Mode specific)
+  dynamic "kubernetes_network_config" {
+    for_each = var.eks_auto_mode_enabled ? [1] : []
+    content {
+      elastic_load_balancing {
+        enabled = true
+      }
+    }
+  }
+  # Storage Config (Auto Mode specific)
+  dynamic "storage_config" {
+    for_each = var.eks_auto_mode_enabled ? [1] : []
+    content {
+      block_storage {
+        enabled = true
+      }
+    }
+  }
+
   enabled_cluster_log_types = var.cluster_logging
 
   depends_on = [
     aws_iam_role_policy_attachment.cluster-AmazonEKSClusterPolicy,
     aws_iam_role_policy_attachment.cluster-AmazonEKSServicePolicy,
+    aws_iam_role_policy_attachment.cluster_AmazonEKSComputePolicy,
+    aws_iam_role_policy_attachment.cluster_AmazonEKSBlockStoragePolicy,
+    aws_iam_role_policy_attachment.cluster_AmazonEKSLoadBalancingPolicy,
+    aws_iam_role_policy_attachment.cluster_AmazonEKSNetworkingPolicy,
   ]
 
   tags = local.tags
@@ -105,6 +137,26 @@ resource "aws_iam_role_policy_attachment" "cluster-AmazonEKSServicePolicy" {
   role       = aws_iam_role.cluster.name
 }
 
+resource "aws_iam_role_policy_attachment" "cluster_AmazonEKSComputePolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSComputePolicy"
+  role       = aws_iam_role.cluster.name
+}
+
+resource "aws_iam_role_policy_attachment" "cluster_AmazonEKSLoadBalancingPolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSLoadBalancingPolicy"
+  role       = aws_iam_role.cluster.name
+}
+
+resource "aws_iam_role_policy_attachment" "cluster_AmazonEKSNetworkingPolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSNetworkingPolicy"
+  role       = aws_iam_role.cluster.name
+}
+
+resource "aws_iam_role_policy_attachment" "cluster_AmazonEKSBlockStoragePolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSBlockStoragePolicy"
+  role       = aws_iam_role.cluster.name
+}
+
 resource "helm_release" "calico" {
   count = var.calico_enabled ? 1 : 0
 

node_role.tf

@@ -30,6 +30,11 @@ resource "aws_iam_role_policy_attachment" "node-AmazonEC2ContainerRegistryReadOn
   role       = aws_iam_role.node.name
 }
 
+resource "aws_iam_role_policy_attachment" "node_AmazonEKSWorkerNodeMinimalPolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSWorkerNodeMinimalPolicy"
+  role       = aws_iam_role.node.name
+}
+
 resource "aws_iam_role_policy_attachment" "node_role_policies" {
   count      = length(var.node_role_policies)
   policy_arn = var.node_role_policies[count.index]

variables.tf

@@ -461,6 +461,12 @@ variable "s3_csi_bucket_names" {
   default     = [""]
 }
 
+variable "eks_auto_mode_enabled" {
+  description = "Enable Auto Mode for EKS cluster"
+  type        = bool
+  default     = false
+}
+
 variable "cloudwatch_observability_enabled" {
   description = "Enable or disable the CloudWatch Observability Add-on for EKS"
   type        = bool