feat: opensearch

[leiicamundi]

Implements: #362

New Features:

• Added an OpenSearch module and GitHub Actions (GHA).
• The cleanup script and action can now target specific modules.
• The IRSA for AuroraDB now creates roles and access policies.
• The README documents the usage of the IRSA setup.

Improvements:

• The cleanup of dependencies in tests has been enhanced.
• Deletion of the EBS storage class in the Terraform state no longer fails.
• The IRSA for AuroraDB is now integrated into the tests.
• Modules are now idempotent (tags and labels have been fixed).

TODOs:

• Backup and monitoring tasks have been referenced for later work in #396.

[Langleu]

Some smaller changes here and there.
Overall looks quite good! 🚀
I did not try it out but as you've written tests and they seemed to have made sense on utilizing the IRSA stuff 👍

[Langleu]

Thinking a bit about the IRSA stuff and usefulness.

Let's say we have Operate, Tasklist, and Zeebe. All need access to OpenSearch but the default policy will only be working for one service account name, right?

Maybe we should mention that somewhere and an easy example on how they can configure the remaining ones to get access as well?
Maybe it's covered in the docs, only have insights based on this work.

[leiicamundi]

Maybe it's covered in the docs; I only have insights based on this work.

It's indeed covered by the docs. I'll finish it ASAP so you can review it.
However, we will need one service account (SA) per service that needs to access the resource.

Thanks for the review! I've fixed most of the points, but the remaining ones are open questions. Let me think about them and get back to you.

[Langleu]

looks good from my side 🚀

[Langleu]

oh wow, it merges it even with failures in the tests 🙈

[leiicamundi]

Incredible... I'll have to fix the postgres job, it fails due to the switch on amazonlinix