OSDOCS-1594 - Adding pod identity webhook content for ROSA

[pneedle-rh]

This applies to main, enterprise-4.12 and enterprise-4.11.

This relates to https://issues.redhat.com/browse/OSDOCS-1594. The PR adds an "Assuming an AWS IAM role for a service account" page to the ROSA documentation.

The preview is at https://51026--docspreview.netlify.app/openshift-rosa/latest/authentication/assuming-an-aws-iam-role-for-a-service-account.html.

[ocpdocs-previewbot]

🤖 Updated build preview is available at:
https://51026--docspreview.netlify.app

Build log: https://circleci.com/gh/ocpdocs-previewbot/openshift-docs/3686

[pneedle-rh]

@sjenning and @michaelryanmcneill hi! Can you please review this PR from an SME perspective? Thanks!

[pneedle-rh]

@michaelryanmcneill after some initial testing, I decided to create separate docs Jiras for your requests to add content for the optional annotations and the cross-account IAM permissions. We can address those items later, separately from this PR.

The Jiras are as follows:

• OSDOCS-4492 - [Feature] Add regional endpoint annotations to the pod identity webhook content
• OSDOCS-4493 - [Feature] Add a cross-account permissions section to the pod identity webhook content

In my testing, the regional endpoint annotation did not produce the corresponding environment variable in the pod. This might potentially relate to aws/amazon-eks-pod-identity-webhook#123. Additionally, I only have access to one AWS account, so I was not able to test the cross-account permissions functionality.

My view is that we should focus on reviewing and publishing the content that I have created for this initial PR and then those items can be tested and added later. In this PR, I have also added some commented out content in relation to the optional annotations for later use.

[jeana-redhat]

This is a really excellent presentation of a workflow that is not at all trivial to explain.

Most of my feedback here is pretty minor, and some is just checking for my own understanding since I will need to understand this later 🤓 Feel free to ping me on Slack if you want to talk about any of the things I brought up more synchronously.

[michaelryanmcneill]

This looks great to me, thanks @pneedle-rh for all your hard work.

[pneedle-rh]

/cherrypick enterprise-4.12

[pneedle-rh]

/cherrypick enterprise-4.11

[openshift-cherrypick-robot]

@pneedle-rh: new pull request created: #52919

In response to this:

/cherrypick enterprise-4.12

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-cherrypick-robot]

@pneedle-rh: new pull request created: #52920

In response to this:

/cherrypick enterprise-4.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.