utility_openshift_target_credential

Creates a long-lived OpenShift ServiceAccount token for Ansible Automation Platform (credential type OpenShift or Kubernetes API Bearer Token). Use this instead of a short-lived oc whoami -t / openshift_temporary_api_key when you need a token that survives re-login. Inventory still stores the token as openshift_api_key on the migration_clusters host (Building your inventory).

Playbook: infra.openshift_virtualization_migration.utility_openshift_target_credential (playbooks/utility_openshift_target_credential.yml). Targets migration_clusters (override group with utility_clusters).

Defaults: resource name migration-factory-aap-credential, namespace openshift-config, ClusterRole cluster-admin. Set utility_openshift_target_credential_display_credential: true to print the token after it is populated.

This role does not create the AAP credential object; aap_seed does that from inventory. It only mints the OpenShift side.

Full argument list: utility_openshift_target_credential README.