chore: entries: include odr iam role

eks.tf

@@ -80,6 +80,19 @@ module "eks" {
           }
         }
       }
+    },
+    # TODO(fd): we should have this passed in as an input in case this ever changes
+    "odr-${local.cluster_name}" = {
+      principal_arn     = var.runner_install_role
+      kubernetes_groups = [] # empty because they are all system:admin and those are replaced by AmazonEKSClusterAdminPolicy
+      policy_associations = {
+        cluster_admin = {
+          policy_arn = module.odr_iam_role.iam_role_arn
+          access_scope = {
+            type = "cluster"
+          }
+        }
+      }
     }
 
   }