iam4kube
iam4kube copied to clipboard
iam4kube should exponential back off on STS calls if it receives an error
At the moment it will retry as fast as it is able to relative to the command line argument --sts-rate-limit
. Even if one service account has a misconfigured trust relationship, this will cause hundreds of requests (and subsequent log lines) per second.
There should be a command line argument to configure a back off on STS error (separate to a standard STS rate limit), and perhaps iam4kube should even be smart about backing off harder for certain types of error.