CORS-4468: aws: automate cluster provisioning with short-term credentials via AWS STS#10671

Open

tthvo wants to merge 8 commits into

openshift:mainfrom

tthvo:CORS-4468

Commits on Jul 2, 2026

aws: add STS install-config field, types, and validation

tthvo
and
claude
committed
aws: generate SA signing key pair for STS managed mode

tthvo
and
claude
committed
aws: extract and parse CredentialsRequests from release image for STS

tthvo
and
claude
committed
aws: provision OIDC S3 bucket, IAM OIDC provider, and STS IAM roles

tthvo
and
claude
committed
aws: generate STS credential secrets and Authentication CR manifests

tthvo
and
claude
committed
aws: add STS permission groups for credential simulation

tthvo
and
claude
committed
aws: clean up OIDC provider during cluster destroy

tthvo
and
claude
committed
deps: go mod tidy
tthvo
committed