refactor: rename Auto Mode variables with auto_mode_ prefix

Rename compute_config -> auto_mode_compute_config,
storage_config -> auto_mode_storage_config,
elastic_load_balancing -> auto_mode_elastic_load_balancing
for clarity. Also add EKS Auto Mode section to README.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Benbentwo

.terraform.lock.hcl

@@ -327,7 +327,71 @@ Module usage with two unmanaged worker groups:
 > you're using. This practice ensures the stability of your infrastructure. Additionally, we recommend implementing a systematic
 > approach for updating versions to avoid unexpected changes.
 
+## EKS Auto Mode
 
+This module supports [EKS Auto Mode](https://docs.aws.amazon.com/eks/latest/userguide/automode.html) (GA December 2024),
+which delegates compute, networking, and storage management to AWS. Enable it using the `auto_mode_compute_config`,
+`auto_mode_storage_config`, and `auto_mode_elastic_load_balancing` variables.
+
+### Enabling Auto Mode
+
+```hcl
+module "eks_cluster" {
+  source  = "cloudposse/eks-cluster/aws"
+  # version = "..."
+
+  auto_mode_compute_config = {
+    enabled       = true
+    node_pools    = ["general-purpose", "system"]
+    node_role_arn = aws_iam_role.auto_mode_node.arn
+  }
+
+  auto_mode_storage_config = {
+    block_storage = {
+      enabled = true
+    }
+  }
+
+  auto_mode_elastic_load_balancing = {
+    enabled = true
+  }
+
+  # ... other configuration
+}
+```
+
+When Auto Mode is enabled, this module automatically:
+- Sets `bootstrap_self_managed_addons = false` (unless explicitly overridden)
+- Adds `sts:TagSession` to the cluster IAM role trust policy
+- Attaches 4 additional IAM policies to the cluster role: `AmazonEKSComputePolicy`, `AmazonEKSBlockStoragePolicy`,
+  `AmazonEKSLoadBalancingPolicy`, and `AmazonEKSNetworkingPolicy`
+
+### Capabilities
+
+All three capabilities must be enabled or disabled together:
+
+| Capability | Variable | What AWS Manages |
+|-----------|----------|-----------------|
+| **Compute** | `auto_mode_compute_config` | Node provisioning via managed Karpenter |
+| **Storage** | `auto_mode_storage_config` | EBS volumes via `ebs.csi.eks.amazonaws.com` |
+| **Networking** | `auto_mode_elastic_load_balancing` | ALB/NLB for Services and Ingress |
+
+### Important Notes
+
+- Requires AWS provider `>= 5.79.0` and Kubernetes `>= 1.29`
+- Auto Mode manages `vpc-cni`, `kube-proxy`, `coredns`, and `aws-ebs-csi-driver` add-ons automatically.
+  Do not include these in the `addons` variable when Auto Mode is enabled.
+- Auto Mode nodes are Bottlerocket-only, immutable, with no SSH/IMDS access
+- Nodes have a 21-day maximum lifetime and are automatically rotated
+- The `node_role_arn` in `auto_mode_compute_config` must be an IAM role with
+  `AmazonEKSWorkerNodeMinimalPolicy` and `AmazonEC2ContainerRegistryPullOnly` attached
+
+### Cluster Version Upgrades
+
+With Auto Mode, Kubernetes version upgrades are simplified:
+1. Bump `kubernetes_version` and apply -- control plane upgrades in place
+2. Managed Karpenter detects version drift and automatically replaces nodes
+3. Auto Mode-managed add-ons are automatically upgraded to compatible versions
 
 
 

README.md

@@ -17,9 +17,9 @@ locals {
 
   # EKS Auto Mode
   auto_mode_flags = [
-    var.compute_config.enabled,
-    var.storage_config.block_storage.enabled,
-    var.elastic_load_balancing.enabled,
+    var.auto_mode_compute_config.enabled,
+    var.auto_mode_storage_config.block_storage.enabled,
+    var.auto_mode_elastic_load_balancing.enabled,
   ]
   auto_mode_all_enabled  = alltrue(local.auto_mode_flags)
   auto_mode_all_disabled = !anytrue(local.auto_mode_flags)
@@ -120,12 +120,12 @@ resource "aws_eks_cluster" "default" {
 
   # IPv4 kubernetes_network_config: render when service_ipv4_cidr is set or ELB is enabled (and not IPv6)
   dynamic "kubernetes_network_config" {
-    for_each = !local.use_ipv6 && (var.service_ipv4_cidr != null || var.elastic_load_balancing.enabled) ? [true] : []
+    for_each = !local.use_ipv6 && (var.service_ipv4_cidr != null || var.auto_mode_elastic_load_balancing.enabled) ? [true] : []
     content {
       service_ipv4_cidr = var.service_ipv4_cidr
 
       dynamic "elastic_load_balancing" {
-        for_each = var.elastic_load_balancing.enabled ? [true] : []
+        for_each = var.auto_mode_elastic_load_balancing.enabled ? [true] : []
         content {
           enabled = true
         }
@@ -140,7 +140,7 @@ resource "aws_eks_cluster" "default" {
       ip_family = "ipv6"
 
       dynamic "elastic_load_balancing" {
-        for_each = var.elastic_load_balancing.enabled ? [true] : []
+        for_each = var.auto_mode_elastic_load_balancing.enabled ? [true] : []
         content {
           enabled = true
         }
@@ -186,7 +186,7 @@ resource "aws_eks_cluster" "default" {
 
   # EKS Auto Mode configuration
   dynamic "compute_config" {
-    for_each = var.compute_config.enabled ? [var.compute_config] : []
+    for_each = var.auto_mode_compute_config.enabled ? [var.auto_mode_compute_config] : []
     content {
       enabled       = true
       node_pools    = compute_config.value.node_pools
@@ -195,7 +195,7 @@ resource "aws_eks_cluster" "default" {
   }
 
   dynamic "storage_config" {
-    for_each = var.storage_config.block_storage.enabled ? [var.storage_config] : []
+    for_each = var.auto_mode_storage_config.block_storage.enabled ? [var.auto_mode_storage_config] : []
     content {
       block_storage {
         enabled = true

main.tf

@@ -206,7 +206,7 @@ variable "bootstrap_self_managed_addons_enabled" {
   default     = null
 }
 
-variable "compute_config" {
+variable "auto_mode_compute_config" {
   description = <<-EOT
     EKS Auto Mode compute configuration. When enabled, AWS manages node
     provisioning via managed Karpenter.
@@ -220,7 +220,7 @@ variable "compute_config" {
   nullable = false
 }
 
-variable "storage_config" {
+variable "auto_mode_storage_config" {
   description = <<-EOT
     EKS Auto Mode storage configuration. When block_storage is enabled,
     AWS manages EBS volumes via the ebs.csi.eks.amazonaws.com provisioner.
@@ -234,7 +234,7 @@ variable "storage_config" {
   nullable = false
 }
 
-variable "elastic_load_balancing" {
+variable "auto_mode_elastic_load_balancing" {
   description = <<-EOT
     EKS Auto Mode elastic load balancing configuration. When enabled,
     AWS manages ALB/NLB creation for Services and Ingress resources.