Description

• Raise min supported version of AWS provider for EKS Auto Mode corrections added in fix: Allow EKS Auto Mode settings to be enabled, disabled, and removed from the configuration hashicorp/terraform-provider-aws#44334
• With the changes added upstream, the implementation to always enforce a value for enabled fields of EKS Auto Mode configurations has been removed in this change. There is further work required on the EKS API to supply these values by default instead of empty fields/nil/null. With this change, the majority of users encountering issues where the diff shows changes for EKS Auto Mode when they are not using Auto Mode is resolved. There is still one edge case where users MUST set compute_config.enabled = false if they wish to disable Auto Mode (after enabling and provisioning) otherwise these changes will not be detected and Auto Mode will not be disabled as intended. Once users have applied the changes with compute_config.enabled = false, they can proceed to remove the compute_config block from their configurations. Again, this edge case should be resolved once the EKS API provides a default value for the other two fields (storage_config and elastic_load_balancing) required by EKS Auto Mode. A warning note has been added to the documentation for this edge case
• Add clarification note on v21 upgrade guide around how to disable custom KMS encryption on cluster secrets
• Correct documented examples for using custom node pools only with EKS Auto Mode

Motivation and Context

• Resolves Disable EKS auto mode fails #3273
• Resolves Error: updating EKS Cluster compute config: No changes needed for EKS Auto Mode configuration provided #3516
• Relates feat: Support EKS Auto Mode custom node pools only creation #3514
• Resolves Enable Auto-Mode with Custom NodePools #3535

Breaking Changes

• No

How Has This Been Tested?

• I have updated at least one of the examples/* to demonstrate and validate my change(s)
• I have tested and validated these changes using one or more of the provided examples/* projects
• I have executed pre-commit run -a on my pull request

Test Procedure

1. Deploy a control plane with the following configurations (truncated for brevity) as the "starting point" prior to recent changes related to EKS Auto Mode (mimicking the path users would take and experience issues):

module "eks" {
  source  = "terraform-aws-modules/eks/aws"
  version = "21.2.0"

  name                   = local.name
  kubernetes_version     = local.kubernetes_version
  endpoint_public_access = true

  enable_cluster_creator_admin_permissions = true

  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.vpc.private_subnets

  tags = local.tags
}

terraform {
  required_version = ">= 1.5.7"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "6.13"
    }
  }
}

2. Once provisioned, change to the following configuration. The source of the module is pointed to the changes contained in this PR. No changes are observed within the Terraform plan diff as expected:

module "eks" {
  source = "../.." # <= modification

  name                   = local.name
  kubernetes_version     = local.kubernetes_version
  endpoint_public_access = true

  enable_cluster_creator_admin_permissions = true

  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.vpc.private_subnets

  tags = local.tags
}

terraform {
  required_version = ">= 1.5.7"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "6.15" # <= modification
    }
  }
}

3. Enable EKS Auto Mode and apply. Auto Mode is enabled as expected and updated in-place:

module "eks" {
  source = "../.."

  name                   = local.name
  kubernetes_version     = local.kubernetes_version
  endpoint_public_access = true

  enable_cluster_creator_admin_permissions = true

  compute_config = { 				 # <= modification
    enabled    = true 				 # <= modification
    node_pools = ["general-purpose"] # <= modification
  } 								 # <= modification

  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.vpc.private_subnets

  tags = local.tags
}

terraform {
  required_version = ">= 1.5.7"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "6.15"
    }
  }
}

4. Disable EKS Auto Mode and apply. Note: this requires explicitly setting compute_config.enabled = false and applying that change. See note above and within the README about trying to disable by simply removing the compute_config block from the configuration failing to correctly disable EKS Auto Mode due to the EKS API current limiations:

module "eks" {
  source = "../.."

  name                   = local.name
  kubernetes_version     = local.kubernetes_version
  endpoint_public_access = true

  enable_cluster_creator_admin_permissions = true

  compute_config = { # <= modification
    enabled = false  # <= modification
  } 				 # <= modification

  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.vpc.private_subnets

  tags = local.tags
}

terraform {
  required_version = ">= 1.5.7"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "6.15"
    }
  }
}

5. Verify that the compute_config block can be removed and there are no changes detected on the Terraform plan diff:

module "eks" {
  source = "../.."

  name                   = local.name
  kubernetes_version     = local.kubernetes_version
  endpoint_public_access = true

  enable_cluster_creator_admin_permissions = true

  # <= modification

  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.vpc.private_subnets

  tags = local.tags
}

terraform {
  required_version = ">= 1.5.7"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "6.15"
    }
  }
}