Add EKS tutorial with service account setup.

[fmassot]

No description provided.

[ChillFish8]

Suggested change

	"oidc.eks.${REGION}.amazonaws.com/id/${CLUSTER_ID}:sub": "system:serviceaccount:${S3_BUCKET}:${SERVICE_ACCOUNT_NAME}"
	"oidc.eks.${REGION}.amazonaws.com/id/${CLUSTER_ID}:sub": "system:serviceaccount:${NAMESPACE}:${SERVICE_ACCOUNT_NAME}"

Think you meant to use NAMESPACE here rather than bucket

[ChillFish8]

Suggested change

	kubectl port-forward svc/{release-name}-quickwit-searcher 7280:7280
	kubectl port-forward svc/quickwit-searcher 7280:7280

Kubetcl seems to not want the release name there

[trinity-1686a]

If the object that you request doesn’t exist, the error that Amazon S3 returns depends on whether you also have the s3:ListBucket permission.
   - If you have the s3:ListBucket permission on the bucket, Amazon S3 returns an HTTP status code 404 Not Found error.
   - If you don’t have the s3:ListBucket permission, Amazon S3 returns an HTTP status code 403 Access Denied error.

(extract from https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html)
we probably need s3:ListBucket (or to handle errors differently), at least when initializing the metastore for the first time

it's a permission to have on arn:aws:s3:::${S3_BUCKET} directly, and not arn:aws:s3:::${S3_BUCKET}/*