OCPBUGS-88035: Set cluster ownership tag on AWSCluster

Set the kubernetes.io/cluster/<infraID>=owned tag on the AWSCluster
object via AdditionalTags so that CAPI-created AWS resources are
visible to the installer's destroy logic. Also propagate user-defined
resource tags from Infrastructure.Status.PlatformStatus.AWS.ResourceTags
to match MAPI behaviour.

Without this tag, openshift-install destroy cluster cannot identify
CAPI-created resources (VMs, volumes, etc.) and they are leaked.

Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>

Author: matzew

pkg/controllers/infracluster/aws.go

@@ -102,6 +102,16 @@ func (r *InfraClusterController) newAWSCluster(providerSpec *mapiv1beta1.AWSMach
 		return nil, fmt.Errorf("failed to extract control plane load balancer configuration: %w", err)
 	}
 
+	tags := awsv1.Tags{}
+
+	if r.Infra.Status.PlatformStatus.AWS != nil {
+		for _, t := range r.Infra.Status.PlatformStatus.AWS.ResourceTags {
+			tags[t.Key] = t.Value
+		}
+	}
+
+	tags[fmt.Sprintf("kubernetes.io/cluster/%s", r.Infra.Status.InfrastructureName)] = "owned"
+
 	target := &awsv1.AWSCluster{
 		ObjectMeta: metav1.ObjectMeta{
 			Name:      r.Infra.Status.InfrastructureName,
@@ -126,6 +136,7 @@ func (r *InfraClusterController) newAWSCluster(providerSpec *mapiv1beta1.AWSMach
 				Kind: awsv1.ControllerIdentityKind,
 				Name: "default",
 			},
+			AdditionalTags: tags,
 			// Set control plane load balancer configuration extracted from MAPI machines
 			ControlPlaneLoadBalancer:          controlPlaneLoadBalancer,
 			SecondaryControlPlaneLoadBalancer: secondaryControlPlaneLoadBalancer,