Listing VPC CIDRs to create routes in pods does not filter on association state

[lbernail]

DescribeVPCCIDRs adds all CIDR associated with the VPC regardless of association state. If this state is different from associated we should not add this CIDR range to the list

When removing a CIDR range from a VPC, the range remains disassociated for a long time (1+ hour) before being removed. We should only add ranges with status associated.

Possible association states:

• associating
• associated
• disassociating
• disassociated
• failing
• failed

I'm not sure what we should do with the associating state because it may fail