Description of problem:

Local AWS authentication using STS is not supported by ccoctl because it is not loading the aws config.


Version-Release number of selected component (if applicable):


How reproducible:

 every time

Steps to Reproduce:

 
$ cat ~/.aws/config
[profile dev]
credential_process = custom_exe -u dale_bewley -a <account_number> -r developer_role
region = us-west-2

$ env | grep AWS_
AWS_PROFILE=dev

$ aws sts get-caller-identity
{
    "UserId": "xxx",
    "Account": "<account_number>",
    "Arn": "arn:aws:sts::<account_number>:assumed-role/developer_role/xxx"
}


Rebuild ccoctl with debugging as ccoctl-debug per diff:

diff --git a/pkg/cmd/provisioning/aws/create_identity_provider.go b/pkg/cmd/provisioning/aws/create_identity_provider.go
index f0c1b701..865b3adf 100644
--- a/pkg/cmd/provisioning/aws/create_identity_provider.go
+++ b/pkg/cmd/provisioning/aws/create_identity_provider.go
@@ -460,6 +460,7 @@ spec:
 func createIdentityProviderCmd(cmd *cobra.Command, args []string) {
        cfg := &awssdk.Config{
                Region: awssdk.String(CreateIdentityProviderOpts.Region),
+               CredentialsChainVerboseErrors: awssdk.Bool(true),
        }

        s, err := session.NewSession(cfg)



Actual results:

$ ccoctl-debug aws create-identity-provider \
    --name=debug-oidc \
    --region=us-west-2 \
    --public-key-file=cco/serviceaccount-signer.public
2021/06/09 09:31:54 failed to create a bucket to store OpenID Connect configuration: NoCredentialProviders: no valid providers in chain
caused by: EnvAccessKeyNotFound: failed to find credentials in the environment.
SharedCredsLoad: failed to load profile, apple_dev.
EC2RoleRequestError: no EC2 instance role found
caused by: RequestError: send request failed
caused by: Get "http://169.254.169.254/latest/meta-data/iam/security-credentials/": dial tcp 169.254.169.254:80: connect: no route to host


Expected results:

$ AWS_SDK_LOAD_CONFIG=true ccoctl-debug aws create-identity-provider \
    --name=debug-oidc \
    --region=us-west-2 \
    --public-key-file=cco/serviceaccount-signer.public
2021/06/09 10:15:09 Bucket debug-oidc-oidc created
2021/06/09 10:15:09 failed to upload discovery document in the S3 bucket debug-oidc-oidc: AccessDenied: Access Denied
        status code: 403, request id: P8ZK2FK7YN6E7JAD, host id: xxx=

Additional info:

* AWS CLI works fine by default.
* ccoctl requires AWS_SDK_LOAD_CONFIG=true variable to utilize STS authentication.
* Requirement for this variable is not in documentation https://docs.openshift.com/container-platform/4.8/authentication/managing_cloud_provider_credentials/cco-mode-sts.html