Add support for EKS Capability

.changelog/45326.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_eks_capability
+```

docs/acc-test-environment-variables.md

@@ -60,6 +60,10 @@ Environment variables (beyond standard AWS Go SDK ones) used by acceptance testi
 | `AWS_EC2_VERIFIED_ACCESS_INSTANCE_LIMIT`                        | Concurrency limit for Verified Access acceptance tests. [Default is 5](https://docs.aws.amazon.com/verified-access/latest/ug/verified-access-quotas.html) if not specified.                      |
 | `AWS_GUARDDUTY_MEMBER_ACCOUNT_ID`                               | Identifier of AWS Account for GuardDuty Member testing. **DEPRECATED:** Should be replaced with standard alternate account handling for tests.                                                   |
 | `AWS_GUARDDUTY_MEMBER_EMAIL`                                    | Email address for GuardDuty Member testing. **DEPRECATED:** It may be possible to use a placeholder email address instead.                                                                       |
+| `AWS_IDENTITY_STORE_GROUP_ID`                                      | ID of a valid AWS Identity Store group.                                                                         |
+| `AWS_IDENTITY_STORE_GROUP_NAME`                                    | Name of a valid AWS Identity Store group.                                                                         |
+| `AWS_IDENTITY_STORE_USER_ID`                                       | ID of a valid AWS Identity Store user.                                                                          |
+| `AWS_IDENTITY_STORE_USER_NAME`                                     | Name of a valid AWS Identity Store user.                                                                          |
 | `AWS_LAMBDA_IMAGE_LATEST_ID`                                    | ECR repository image URI (tagged as `latest`) for Lambda container image acceptance tests.                                                                                                       |
 | `AWS_LAMBDA_IMAGE_V1_ID`                                        | ECR repository image URI (tagged as `v1`) for Lambda container image acceptance tests.                                                                                                           |
 | `AWS_LAMBDA_IMAGE_V2_ID`                                        | ECR repository image URI (tagged as `v2`) for Lambda container image acceptance tests.                                                                                                           |

internal/acctest/acctest.go

@@ -2180,12 +2180,7 @@ func CheckResourceAttrIsJSONString(n, key string) resource.TestCheckFunc {
 // The variable's value is returned.
 func SkipIfEnvVarNotSet(t *testing.T, key string) string {
 	t.Helper()
-
-	v := os.Getenv(key)
-	if v == "" {
-		t.Skipf("Environment variable %s is not set, skipping test", key)
-	}
-	return v
+	return envvar.SkipIfEmpty(t, key, "")
 }
 
 // SkipIfExeNotOnPath skips the current test if the specified executable is not found in the directories named by the PATH environment variable.

internal/envvar/envvar.go

@@ -172,7 +172,11 @@ func SkipIfEmpty(t testing.T, name string, usageMessage string) string {
 	value := os.Getenv(name)
 
 	if value == "" {
-		t.Skipf("skipping test; environment variable %s must be set. Usage: %s", name, usageMessage)
+		msg := fmt.Sprintf("skipping test; environment variable %s must be set", name)
+		if usageMessage != "" {
+			msg += ". Usage: " + usageMessage
+		}
+		t.Skip(msg)
 	}
 
 	return value

internal/service/eks/addon.go

@@ -411,11 +411,15 @@ func flattenAddonPodIdentityAssociations(ctx context.Context, associations []str
 }
 
 func findAddonByTwoPartKey(ctx context.Context, conn *eks.Client, clusterName, addonName string) (*types.Addon, error) {
-	input := &eks.DescribeAddonInput{
+	input := eks.DescribeAddonInput{
 		AddonName:   aws.String(addonName),
 		ClusterName: aws.String(clusterName),
 	}
 
+	return findAddon(ctx, conn, &input)
+}
+
+func findAddon(ctx context.Context, conn *eks.Client, input *eks.DescribeAddonInput) (*types.Addon, error) {
 	output, err := conn.DescribeAddon(ctx, input)
 
 	if errs.IsA[*types.ResourceNotFoundException](err) {
@@ -437,30 +441,13 @@ func findAddonByTwoPartKey(ctx context.Context, conn *eks.Client, clusterName, a
 }
 
 func findAddonUpdateByThreePartKey(ctx context.Context, conn *eks.Client, clusterName, addonName, id string) (*types.Update, error) {
-	input := &eks.DescribeUpdateInput{
+	input := eks.DescribeUpdateInput{
 		AddonName: aws.String(addonName),
 		Name:      aws.String(clusterName),
 		UpdateId:  aws.String(id),
 	}
 
-	output, err := conn.DescribeUpdate(ctx, input)
-
-	if errs.IsA[*types.ResourceNotFoundException](err) {
-		return nil, &retry.NotFoundError{
-			LastError:   err,
-			LastRequest: input,
-		}
-	}
-
-	if err != nil {
-		return nil, err
-	}
-
-	if output == nil || output.Update == nil {
-		return nil, tfresource.NewEmptyResultError(input)
-	}
-
-	return output.Update, nil
+	return findUpdate(ctx, conn, &input)
 }
 
 func statusAddon(ctx context.Context, conn *eks.Client, clusterName, addonName string) retry.StateRefreshFunc {