skuber icon indicating copy to clipboard operation
skuber copied to clipboard

stale service account token after 90 days, after EKS 1.21 release

Open xubofei1983 opened this issue 1 year ago • 3 comments

https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html#identify-pods-using-stale-tokens

I think need a feature to refresh the tokens within an hour?

xubofei1983 avatar Mar 07 '23 23:03 xubofei1983

like this commit https://github.com/kubernetes-client/java/commit/41844eab4ac7eac6087ebe839fed7a27d07966f4

xubofei1983 avatar Mar 07 '23 23:03 xubofei1983

Hi @xubofei1983 I'll take a look at this (of course a PR welcome)

doriordan avatar Mar 08 '23 14:03 doriordan

In the meantime I imagine it is uncommon for pods to be up for more than 90 days without an update / restart

doriordan avatar Mar 08 '23 14:03 doriordan