Full example breaks with kubernetes version 1.20 about terraform-aws-eks-cluster HOT 1 CLOSED

locals {
  namespace = "test"
  stage     = "dev"

  kubernetes_version         = "1.20"
  tags                       = merge(module.label.tags, tomap({ "kubernetes.io/cluster/${module.label.id}" = "shared" }))
  eks_worker_ami_name_filter = "amazon-eks-node-${local.kubernetes_version}*"
  public_subnets_additional_tags = {
    "kubernetes.io/role/elb" : 1
  }
  private_subnets_additional_tags = {
    "kubernetes.io/role/internal-elb" : 1
  }
}

module "label" {
  source     = "cloudposse/label/null"
  version    = "0.24.1"
  attributes = ["${local.namespace}-${local.stage}-cluster"]
}

module "eks_cluster" {
  source  = "cloudposse/eks-cluster/aws"
  version = "0.39.0"

  namespace = local.namespace
  stage     = local.stage
  tags      = local.tags

  region                       = "REGION"
  vpc_id                       = data.terraform_remote_state.vpc.outputs.vpc.vpc_id
  subnet_ids                   = concat(module.subnets.private_subnet_ids, module.subnets.public_subnet_ids)
  kubernetes_version           = local.kubernetes_version
  local_exec_interpreter       = ["/bin/sh", "-c"]
  oidc_provider_enabled        = true
  enabled_cluster_log_types    = ["api"]
  cluster_log_retention_period = 7

  cluster_encryption_config_enabled                         = true
  cluster_encryption_config_kms_key_id                      = ""
  cluster_encryption_config_kms_key_enable_key_rotation     = true
  cluster_encryption_config_kms_key_deletion_window_in_days = 30
  cluster_encryption_config_kms_key_policy                  = null
  cluster_encryption_config_resources                       = ["secrets"]

  kubernetes_config_map_ignore_role_changes = var.kubernetes_config_map_ignore_role_changes
  workers_role_arns                         = var.existing_worker_role_arns
  
}

module "eks_node_group" {
  source  = "cloudposse/eks-node-group/aws"
  version = "0.20.0"

  namespace = local.namespace
  stage     = local.stage
  tags      = local.tags

  subnet_ids = module.subnets.private_subnet_ids
  cluster_name = (var.existing_cluster_name == "" ?
    module.eks_cluster.eks_cluster_id
  : var.existing_cluster_name)
  instance_types = var.instance_types
  desired_size   = var.desired_size
  min_size       = var.min_size
  max_size       = var.max_size
  disk_size      = var.vm_pd_ssd_size
}

data "null_data_source" "wait_for_cluster_and_kubernetes_configmap" {
  inputs = {
    cluster_name             = module.eks_cluster.eks_cluster_id
    kubernetes_config_map_id = module.eks_cluster.kubernetes_config_map_id
  }
}

data "aws_eks_cluster" "cluster" {
  name = (var.existing_cluster_name == "" ?
    module.eks_cluster.eks_cluster_id
  : var.existing_cluster_name)
}

data "aws_eks_cluster_auth" "eks" {
  name = (var.existing_cluster_name == "" ?   data.null_data_source.wait_for_cluster_and_kubernetes_configmap.outputs["cluster_name"]
  : var.existing_cluster_name)
}

data "terraform_remote_state" "xyz" {
  backend = "s3"

  config = {
    bucket   = "BUCKET-name"
    key      = "state-key"
    region   = "REGION"
  }
}

variable "kubernetes_config_map_ignore_role_changes" {
  type        = bool
  default     = true
}

variable "existing_cluster_name" {
  type        = string
  default     = ""
}

Error: configmaps "aws-auth" already exists
│ 
│  with module.eks_cluster.kubernetes_config_map.aws_auth_ignore_changes[0],
│  on .terraform/modules/eks_cluster/auth.tf line 83, in resource "kubernetes_config_map" "aws_auth_ignore_changes":
│  83: resource "kubernetes_config_map" "aws_auth_ignore_changes" {