feat: (PSKD-904) Support credentials when assuming an IAM role

[dhoucgitter]

Changes

• Updates to support authenticating to Terraform using temporary AWS credentials generated by assuming an IAM role
• Expose EKS cluster authentication_mode as a General configuration variable
• Add admin_access_entry_role_arns as a General configuration variable. Add behavior to create an admin level EKS access entry for each role ARN specified in this list of strings.
• Added CONFIG-VARS.md doc for the two new configuration variables.

[supear]

Here are some edits!

[dhoucgitter]

Hi @supear, please review the latest commit for updates based on your suggested doc changes, thanks.

[supear]

Just one typo. I think it's good to go once that's fixed!

[ajeffowens]

This line from fsx_ontap will need to be adapted for the iam role scenario:

viya4-iac-aws/modules/aws_fsx_ontap/main.tf

Line 81 in 5011530

user = data.aws_iam_user.terraform.user_name

.

Otherwise it fails like this:

╷
│ Error: getting user: operation error IAM: GetUser, https response error StatusCode: 404, RequestID: 2ad78f83-7713-4d54-81c3-e343f5eb1f9a, NoSuchEntity: The user with name GitHubActions cannot be found.
│ 
│   with module.ontap[0].data.aws_iam_user.terraform,
│   on modules/aws_fsx_ontap/main.tf line 76, in data "aws_iam_user" "terraform":
│   76: data "aws_iam_user" "terraform" {
│ 
╵

[dhoucgitter]

Hi @supear, based on your last comment and the new commit, I will go ahead and resolve your doc review comments as completed, sound good?

[dhoucgitter]

This line from fsx_ontap will need to be adapted for the iam role scenario:

viya4-iac-aws/modules/aws_fsx_ontap/main.tf

Line 81 in 5011530

user = data.aws_iam_user.terraform.user_name

.
Otherwise it fails like this:

╷
│ Error: getting user: operation error IAM: GetUser, https response error StatusCode: 404, RequestID: 2ad78f83-7713-4d54-81c3-e343f5eb1f9a, NoSuchEntity: The user with name GitHubActions cannot be found.
│ 
│   with module.ontap[0].data.aws_iam_user.terraform,
│   on modules/aws_fsx_ontap/main.tf line 76, in data "aws_iam_user" "terraform":
│   76: data "aws_iam_user" "terraform" {
│ 
╵

Hi @ajeffowens , the latest commit should handle creating the correct policy attachment whether using an assumed IAM role or IAM user. I'll message you once I have a new image ready that I'm hoping you can try out again.