skuber
skuber copied to clipboard
stale service account token after 90 days, after EKS 1.21 release
https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html#identify-pods-using-stale-tokens
I think need a feature to refresh the tokens within an hour?
like this commit https://github.com/kubernetes-client/java/commit/41844eab4ac7eac6087ebe839fed7a27d07966f4
Hi @xubofei1983 I'll take a look at this (of course a PR welcome)
In the meantime I imagine it is uncommon for pods to be up for more than 90 days without an update / restart