✨api: awscluster: allow best effort delete for s3 objects

This change introduces a new config option for `S3Bucket` to allow best
effort delete for S3 objects. This is useful to not fail cluster
installs when the user has policies in place that prevent object
deletion.

Author: r4f4

api/v1beta1/zz_generated.conversion.go

@@ -300,6 +300,10 @@ type S3Bucket struct {
 	// +kubebuilder:validation:MaxLength:=63
 	// +kubebuilder:validation:Pattern=`^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$`
 	Name string `json:"name"`
+
+	// BestEffortDeleteObjects defines whether access/permission errors during object deletion should be ignored.
+	// +optional
+	BestEffortDeleteObjects *bool `json:"bestEffortDeleteObjects,omitempty"`
 }
 
 // +kubebuilder:object:root=true

api/v1beta2/awscluster_types.go

@@ -1514,6 +1514,10 @@ spec:
                   (https://coreos.github.io/ignition/) for bootstrapping (requires
                   BootstrapFormatIgnition feature flag to be enabled).
                 properties:
+                  bestEffortDeleteObjects:
+                    description: BestEffortDeleteObjects defines whether access/permission
+                      errors during object deletion should be ignored.
+                    type: boolean
                   controlPlaneIAMInstanceProfile:
                     description: ControlPlaneIAMInstanceProfile is a name of the IAMInstanceProfile,
                       which will be allowed to read control-plane node bootstrap data

api/v1beta2/zz_generated.deepcopy.go

@@ -1140,6 +1140,10 @@ spec:
                           Ignition (https://coreos.github.io/ignition/) for bootstrapping
                           (requires BootstrapFormatIgnition feature flag to be enabled).
                         properties:
+                          bestEffortDeleteObjects:
+                            description: BestEffortDeleteObjects defines whether access/permission
+                              errors during object deletion should be ignored.
+                            type: boolean
                           controlPlaneIAMInstanceProfile:
                             description: ControlPlaneIAMInstanceProfile is a name
                               of the IAMInstanceProfile, which will be allowed to