PEM-10055

[HigashikataZhangsuke]

Enable Provider ID Remapping and disable incluster config for AWS Secret Emulator ENV

[spectro-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: HigashikataZhangsuke
To complete the pull request process, please assign after the PR has been reviewed.
You can assign the PR to them by writing /assign in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[bulwark-spectrocloud]

⚠️ GoVulnCheck scan found vulnerabilities:

1. GO-2026-4394
   • Module: go.opentelemetry.io/otel/sdk
   • Found in: v1.28.0
   • Fixed in: v1.40.0
   • Example Traces:
     1. cmd/clusterctl/client/repository/repository_gitlab.go:157:34: repository.GetFile calls http.Do, which eventually calls otelhttp.RoundTrip
     2. internal/topology/variables/clusterclass_variable_validation.go:28:2: variables.init calls validation.init, which eventually calls trace.init
     3. internal/topology/variables/clusterclass_variable_validation.go:28:2: variables.init calls validation.init, which eventually calls resource.init
     4. cmd/clusterctl/client/repository/repository_gitlab.go:168:28: repository.GetFile calls io.ReadAll, which eventually calls otelhttp.Read
     5. cmd/clusterctl/client/repository/repository_gitlab.go:168:28: repository.GetFile calls io.ReadAll, which eventually calls otelhttp.serveHTTP$2
2. GO-2025-3754
   • Module: github.com/cloudflare/circl
   • Found in: v1.3.7
   • Fixed in: v1.6.1
   • Example Traces:
     1. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init
     2. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init
     3. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ecc.init
     4. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ecc.init
     5. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init

Please review these findings and fix the issues before merging.