iam4kube icon indicating copy to clipboard operation
iam4kube copied to clipboard

iam4kube should exponential back off on STS calls if it receives an error

Open mwhittington21 opened this issue 6 years ago • 0 comments

At the moment it will retry as fast as it is able to relative to the command line argument --sts-rate-limit. Even if one service account has a misconfigured trust relationship, this will cause hundreds of requests (and subsequent log lines) per second.

There should be a command line argument to configure a back off on STS error (separate to a standard STS rate limit), and perhaps iam4kube should even be smart about backing off harder for certain types of error.

mwhittington21 avatar Jul 12 '18 07:07 mwhittington21