callum-p

I have separate dev/prod/etc accounts using AWS SSO. To achieve this I do something like this: ```sh export ADMIN_ROLE=$(awscli iam list-roles --query 'Roles[?starts_with(RoleName, `AWSReservedSSO_KubernetesAdmin`) == `true`].RoleName' --output text) export READ_ONLY_ROLE=$(awscli...

> This tackles initial provisioning, but since the name of AWS SSO managed roles is subject to change, this mapping can break at any point in time, doesn't it? Does...

:+1: just got hit by this now and there is no way to disable caching that I can see. I can see the main constructor accepts the option `useETags: false`...

:+1: me too. I've got the sentry trace-id header going from my SPA to graphql backend but unable to make use of it in the backend. I'm seeing it in...

@tomekit doesn't look like your DS is using the flag ` --namespace-restrictions` as per the docs @ https://github.com/jtblin/kube2iam#namespace-restrictions.

+1 I have this issue in a kops cluster on a container that is constantly polling SQS. It only happens once or twice every few hours. ``` {"stream":"stderr","time":"2019-10-11T03:03:48.24488907Z","kubernetes":{"container_name":"kiam","namespace_name":"kube-system","pod_name":"kiam-server-c5hpk","container_image":"quay.io/uswitch/kiam:v3.0","host":"ixx"},"level":"error","msg":"error requesting credentials:...

Disregard pull request - need to fix a test then resubmit.