Using the CloudWatch Logging add-on with ROSA STS Clusters

Issue

• ROSA clusters installed using the Security Token Service (STS) workflow do not have the ability to create the long-lived IAM credentials necessary for the Logging add-on to properly authenticate with AWS CloudWatch.

• The following message is shown in the clusterlogforwarder resource when installing the Logging add-on in ROSA cluster with STS:

  invalid: unrecognized outputs: [cloudwatch], no valid outputs