An AWS OIDC trust refresh fixes most clusters and one controller still fails

A cluster identity refresh completes and later only one environment continues to fail IRSA or web-identity auth for a controller.