Add handling for upgrade of serviceaccounts

.github/actions/e2e/create-cluster/action.yaml

@@ -146,6 +146,29 @@ runs:
         wellKnownPolicies:
           ebsCSIController: true
       EOF
+      
+      # We need to call these create iamserviceaccount commands again since the "eksctl upgrade cluster" action
+      # doesn't handle updates to IAM serviceaccounts correctly when the roles assigned to them change
+      eksctl create iamserviceaccount \
+        --cluster ${{ inputs.cluster_name }} \
+        --name karpenter \
+        --namespace karpenter \
+        --role-name karpenter-irsa-${{ inputs.cluster_name }} \
+        --attach-policy-arn "arn:aws:iam::${{ inputs.account_id }}:policy/KarpenterControllerPolicy-${{ inputs.cluster_name }}" \
+        --attach-policy-arn "arn:aws:iam::${{ inputs.account_id }}:policy/KarpenterControllerPolicy-Alpha-${{ inputs.cluster_name }}" \
+        --role-only \
+        --override-existing-serviceaccounts \
+        --approve
+      eksctl create iamserviceaccount \
+        --cluster ${{ inputs.cluster_name }} \
+        --name prometheus-kube-prometheus-prometheus \
+        --namespace prometheus \
+        --role-name prometheus-irsa-${{ inputs.cluster_name }} \
+        --attach-policy-arn "arn:aws:iam::${{ inputs.account_id }}:policy/PrometheusWorkspaceIngestionPolicy"
+        --role-only \
+        --override-existing-serviceaccounts \
+        --approve
+
   - name: tag oidc provider of the cluster
     if: always()
     shell: bash