feat: add kubernetesGroups to AccessEntries

[markussiebert]

Issue # (if applicable)

Closes #30604

Reason for this change

Right now, it was not possible to set kubernetesGroups on AccessEntries and it was required to set AccessPolicies. Both were artificial limitiations, as Cloudformation nor the EKS Api behave like this.

With allowing kubernetesGroups, it's possible to define custom mappings of IAM Roles to (Cluster)RoleBindings.

Description of changes

No decisions, straight forward code

Description of how you validated changes

Created UnitTests

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed add Clarification Request to a comment.

[markussiebert]

Exemption Request

[valentin-vasile]

This is very much needed 🙏

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 77.17%. Comparing base (d14a01c) to head (ecd53c5).
Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #32074   +/-   ##
=======================================
  Coverage   77.17%   77.17%           
=======================================
  Files         105      105           
  Lines        7162     7162           
  Branches     1311     1311           
=======================================
  Hits         5527     5527           
  Misses       1455     1455           
  Partials      180      180           

Flag	Coverage Δ
suite.unit	77.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
packages/aws-cdk	77.17% <ø> (ø)

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: ecd53c5
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[aws-cdk-automation]

The pull request linter fails with the following errors:

❌ Features must contain a change to a README file.
❌ Features must contain a change to an integration test file and the resulting snapshot.

PRs must pass status checks before we can provide a meaningful review.

If you would like to request an exemption from the status checks or clarification on feedback, please leave a comment on this PR containing Exemption Request and/or Clarification Request.

✅ A exemption request has been requested. Please wait for a maintainer's review.