When the cloud-credential-operator is used in manual mode, and awsSTSIAMRoleARN is not present in a credentialRequest (such as core operators), it continually attempts to reconcile. This started happening when we began filtering the secrets. Because the manually managed secrets do not have the proper annotation, cloud-credential-operator is no longer able to see them. As a result, when attempting to see if the credentialRequest needs to be updated (needsupdate), it always returns true due to no secret found.

    4.15.3

    Always present in AWS STS clusters

    1.create an STS clsuter
    2.check the cco pod logs for repeating attempts
    3.
    

    CCO continually attempts to reconcile these CRs

    CCO should not be attempting to reconcile these CRs.