fix: Don’t add empty Roles ARN in aws-auth configmap, specifically when no Fargate profiles are specified

[huddy]

PR o'clock

Description

The new fargate code seems to have caused a bug in authmap.

Currently even when no fargate profiles are specified the fargate module output is used to create an authmap entry with an empty ARN.

The plan shows:

                - "groups":
              +   - "system:bootstrappers"
              +   - "system:nodes"
              +   - "system:node-proxier"
              +   "rolearn": ""
              +   "username": "system:node:{{SessionName}}"
              + - "groups":

Apply errors:

Error: Failed to update Config Map: Unauthorized
  on .terraform/modules/eks_cluster/aws_auth.tf line 65, in resource "kubernetes_config_map" "aws_auth":
  65: resource "kubernetes_config_map" "aws_auth" {

This seems to be because "rolearn" is empty.

Checklist

• CI tests are passing
• README.md has been updated after any changes to variables and outputs. See https://github.com/terraform-aws-modules/terraform-aws-eks/#doc-generation

[barryib]

Thanks @huddy for your fix. Nice catch.

[barryib]

v13.2.1 is now released

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.