Add script to automate prow-token renewal across all Key Vaults

[weherdh]

What https://redhat.atlassian.net/browse/AROSLSRE-637

The script automates registering a new prow-token in all 4 global Key Vaults (arohcpdev-global, arohcpint-global, arohcpstg-global, arohcpprod-global).

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: weherdh
Once this PR has been reviewed and has the lgtm label, please assign stevekuznetsov for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• dev-infrastructure/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds a bash utility to extract (or accept via file) the OpenShift CI prow ServiceAccount token and register it into the set of global Azure Key Vaults used by EV2 via secret-sync.

Changes:

• Introduces renew-prow-token.sh to extract the token from the CI cluster (oc extract) or read it from a provided file.
• Registers the token as prow-token into one or all global Key Vaults using tooling/secret-sync.
• Adds CLI help/usage guidance and basic input validation.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[openshift-ci]

@weherdh: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/cspr	b80fdfb	link	true	/test cspr

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.