feat: support cluster_security_group_tags and node_security_group_tags

[armujahid]

What does this PR do?

This PR adds cluster_security_group_tags and node_security_group_tags support.
I just propagated both variables to https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/latest

Motivation

Nginx (and AWS load balancer) controller expects one security group in Node otherwise this error is thrown

Error updating load balancer with new hosts map[1, 2, ....]: Multiple tagged security groups found for instance <instance id>; ensure only the k8s security group is tagged; the tagged groups were ....

Currently If we run karpenter example with nginx then we get this error because kubernetes.io/cluster/${eks-cluster-id}: owned returns two security groups:

References:

• Modify all SecurityGroups tagged with kubernetes.io/cluster/$name kubernetes-sigs/aws-load-balancer-controller#2367
• Note on https://karpenter.sh/preview/aws/provisioning/#securitygroupselector-required-when-not-using-launchtemplate
  

More

• Yes, I have tested the PR using my local account setup (Provide any test evidence report under Additional Notes)
• Yes, I have added a new example under examples to support my PR
• Yes, I have created another PR for add-ons under add-ons repo (if applicable)
• Yes, I have updated the docs for this feature
• Yes, I ran pre-commit run -a with this PR

Note: Not all the PRs required examples and docs except a new pattern or add-on added.

For Moderators

• E2E Test successfully complete before merge?

Additional Notes

I will also update karpenter example in next PR to use "karpenter.sh/discovery" = local.cluster_name security group selector in provisioner below node_security_group_tags will also be added in "eks_blueprints" module block to avoid any issue with Nginx.

  node_security_group_tags = {
    "karpenter.sh/discovery" = local.cluster_name
  }

[armujahid]

All checks are now Green :)

[bryantbiggs]

Thanks @armujahid - are there additional changes to be made in this PR? Looking at the information provided above, specifically:

I will also update karpenter example in next PR to use "karpenter.sh/discovery" = local.cluster_name security group selector in provisioner below node_security_group_tags will also be added in "eks_blueprints" module block to avoid any issue with Nginx.

[armujahid]

@bryantbiggs This PR is complete from my side. I will do karpenter example changes in a separate PR.

[bryantbiggs]

Can we include those changes here so we show the motivation behind adding the additional tags?

[armujahid]

Sure. I will push changes here.

[armujahid]

pushed :)

[armujahid]

Checks are now green after merging main.

[bryantbiggs]

Thank you @armujahid !