aws-auth still looks correct but kubelet bootstrap fails

A cluster auth migration keeps the old mappings on paper, but node bootstrap starts failing because the node identity path has changed underneath.