When troubleshooting a failed cluster deletion, I discovered the control-plane-operator failed with ModifyVpcEndpoint.
This was due to the control plane operator role no longer allowing the ModifyVpcEndpoint permission and is expected.
However, the cluster deletion should not be stuck indefinitely due to this lack of permission.

Always

    1. Create a hosted cluster and wait for it to come up
    2. Remove the ModifyVpcEndpoint permission from the control plane operator role
    3. Delete the hosted cluster

The hosted cluster never goes away because it's lacking the permission

The hosted cluster eventually gives up and goes away