[Karpenter] Pod Identity Supports

[vumdao]

Issue:
Pod Identity Supports Notice
Karpenter now supports using Pod Identity to authenticate AWS SDK to make API requests to AWS services using AWS Identity and Access Management (IAM) permissions.

Description of changes:

• Introduce option to enable Pod Identity, this replaces IRSA method to manage credentials for Karpenter controller.
• Resources created for using Pod Identity
  • IAM role with service principle pods.eks.amazonaws.com and allow actions sts:AssumeRole and sts:TagSession
  • Pod Identity associations
  • Service account created by Helm chart without eks.amazonaws.com/role-arn annotation

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[vumdao]

@shapirov103 Do you know what's wrong with the markdown-link-check ?

[shapirov103]

@vumdao the md check failure is not related, it is fixed now in origin/task/1.15.0-release-prep.

[shapirov103]

Looks great, will kick off e2e.

[shapirov103]

/do-e2e-tests

[aws-ia-ci]

end to end tests passed

[shapirov103]

LGTM