fn resolve_oauth_audience( configured: Option<String>, cluster_id: &str, ) -> Result<String, BoxedError>