Unable to rotate the RSA key pair used for OpenShift Manual Mode with Amazon STS in RHOCP 4

Solution Verified - Updated 2025-06-23T13:45:21+00:00 -

Issue

Updating the private key in the cluster's initial-bounding-signing-keys secret doesn't propagate the change to validate new WebIdentity tokens against AWS.
Public signing key is unable to point recreated OIDC

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)