Having issues at work with #AWS where we're allowed to deploy EKS clusters but our security bods won't let us assign the OIDC connection without a support ticket and them doing it, which seems to be pretty much a dependency these days with pod security and persistent volumes requiring it which really slows stuff down.
And then when you're launching and tearing down EKS clusters as part of a test suite, it mega sucks.
@magicaltrout (HI! I think we're working on very similar things) I "solved" this by requiring the security people to also use an EKS Terraform module, which does the OIDC bits automatically.