Ensure platform workload identity IDs remain in the cluster doc after admin updates (#4063)

pkg/cluster/adminupdate_test.go

@@ -49,6 +49,7 @@ func TestAdminUpdateSteps(t *testing.T) {
 		"[Action initializeClusterMsiClients]",
 		"[AuthorizationRetryingAction clusterIdentityIDs]",
 		"[AuthorizationRetryingAction platformWorkloadIdentityIDs]",
+		"[AuthorizationRetryingAction persistPlatformWorkloadIdentityIDs]",
 		"[Action fixInfraID]",
 	}
 

pkg/cluster/install.go

@@ -99,6 +99,7 @@ func (m *manager) getZerothSteps() []steps.Step {
 			steps.Action(m.initializeClusterMsiClients),
 			steps.AuthorizationRetryingAction(m.fpAuthorizer, m.clusterIdentityIDs),
 			steps.AuthorizationRetryingAction(m.fpAuthorizer, m.platformWorkloadIdentityIDs),
+			steps.AuthorizationRetryingAction(m.fpAuthorizer, m.persistPlatformWorkloadIdentityIDs),
 		}
 
 		bootstrap = append(bootstrap, managedIdentitySteps...)