Anish Bista

@ifalex please have a look.

@aburdenthehand Can i work on this issue or it is for Kubevirt member only ?

@dkarpele Could you please help me ? It quiet urgent and we are facing issue in both dev and prod.

@tom-zen Thank you it did the setup. It was working yesterday evening. Now, today morning it says the token expires could get the registry tag.

I think this is the issue : - refreshInterval: 11h means the token is refreshed before expiry once, but after the next 12-hour expiry the refresh is still 11 hours...

``` time="2025-11-27T01:19:43Z" level=error msg="Could not get tags from registry: denied: Your authorization token has expired. Reauthenticate and try again." application=argocd/gateway-kong controller=imageupdater controllerGroup=argocd-image-updater.argoproj.io controllerKind=ImageUpdater imageUpdater_name=all-apps-image-updater imageUpdater_namespace=argocd image_alias=gateway image_digest="sha256:0dc306ff9ca33a492e5529367b16b5bdb984aff921f80a850b918848b4b116e6" image_name=.dkr.ecr.us-east-1.amazonaws.com/enkryptai-dev/gateway image_registry=.dkr.ecr.us-east-1.amazonaws.com logger=reconcile...

Following above approach i am still getting token expired error. Can any one help me to resolve this issue ?

Sharing my whole manifest here : ``` --- apiVersion: generators.external-secrets.io/v1alpha1 kind: ECRAuthorizationToken metadata: name: ecr-auth-token namespace: argocd-image-updater-system spec: region: us-east-1 auth: jwt: serviceAccountRef: name: argocd-image-updater-controller --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret...

When i restart the pod, it will again start working for next 12 hours. But it should be dynamic right ?

@dkarpele once secret is modified. Does image updater pod pull latest token ? It need manual restart of the pod to pull the new token. Configmap look like ``` apiVersion:...