r/aws_eks_cluster: Don't associate an encryption_config if there's already one

[ewbankkit]

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Closes #19968.

Output from acceptance testing:

Commercial

% make testacc TEST=./aws TESTARGS='-run=TestAccAWSEksCluster_EncryptionConfig_VersionUpdate\|TestAccAWSEksCluster_EncryptionConfig_Create\|TestAccAWSEksCluster_EncryptionConfig_Update'
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./aws -v -count 1 -parallel 20 -run=TestAccAWSEksCluster_EncryptionConfig_VersionUpdate\|TestAccAWSEksCluster_EncryptionConfig_Create\|TestAccAWSEksCluster_EncryptionConfig_Update -timeout 180m
=== RUN   TestAccAWSEksCluster_EncryptionConfig_Create
=== PAUSE TestAccAWSEksCluster_EncryptionConfig_Create
=== RUN   TestAccAWSEksCluster_EncryptionConfig_Update
=== PAUSE TestAccAWSEksCluster_EncryptionConfig_Update
=== RUN   TestAccAWSEksCluster_EncryptionConfig_VersionUpdate
=== PAUSE TestAccAWSEksCluster_EncryptionConfig_VersionUpdate
=== CONT  TestAccAWSEksCluster_EncryptionConfig_Create
=== CONT  TestAccAWSEksCluster_EncryptionConfig_VersionUpdate
=== CONT  TestAccAWSEksCluster_EncryptionConfig_Update
--- PASS: TestAccAWSEksCluster_EncryptionConfig_Create (701.52s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_VersionUpdate (2181.28s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_Update (3741.37s)
PASS
ok  	github.com/terraform-providers/terraform-provider-aws/aws	3744.552s

GovCloud

% make testacc TEST=./aws TESTARGS='-run=TestAccAWSEksCluster_EncryptionConfig_VersionUpdate\|TestAccAWSEksCluster_EncryptionConfig_Create\|TestAccAWSEksCluster_EncryptionConfig_Update'

==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./aws -v -count 1 -parallel 20 -run=TestAccAWSEksCluster_EncryptionConfig_VersionUpdate\|TestAccAWSEksCluster_EncryptionConfig_Create\|TestAccAWSEksCluster_EncryptionConfig_Update -timeout 180m
=== RUN   TestAccAWSEksCluster_EncryptionConfig_Create
=== PAUSE TestAccAWSEksCluster_EncryptionConfig_Create
=== RUN   TestAccAWSEksCluster_EncryptionConfig_Update
=== PAUSE TestAccAWSEksCluster_EncryptionConfig_Update
=== RUN   TestAccAWSEksCluster_EncryptionConfig_VersionUpdate
=== PAUSE TestAccAWSEksCluster_EncryptionConfig_VersionUpdate
=== CONT  TestAccAWSEksCluster_EncryptionConfig_Create
=== CONT  TestAccAWSEksCluster_EncryptionConfig_VersionUpdate
=== CONT  TestAccAWSEksCluster_EncryptionConfig_Update
--- PASS: TestAccAWSEksCluster_EncryptionConfig_Create (779.08s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_VersionUpdate (2126.62s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_Update (3491.77s)
PASS
ok  	github.com/terraform-providers/terraform-provider-aws/aws	3495.209s

[petewilcock]

@ewbankkit Looks good, hope this can make it to next version release as we're still hitting this.

[YakDriver]

Looks good! 🎉

Acceptance tests on us-west-2:

--- PASS: TestAccAWSEksCluster_EncryptionConfig_Create (655.57s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_VersionUpdate (2269.50s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_Update (3451.46s)

Acceptance tests on GovCloud:

--- PASS: TestAccAWSEksCluster_EncryptionConfig_Create (594.18s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_VersionUpdate (2305.52s)
--- PASS: TestAccAWSEksCluster_EncryptionConfig_Update (3389.76s)

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.