kustomize-controller icon indicating copy to clipboard operation
kustomize-controller copied to clipboard

Published 20 hours ago • verified publisher icon fluxcd

SOPS AZKV getDefaultAzureCredential triggers API rate limit

Open apeschel opened this issue 1 year ago • 3 comments

When the Kustomize controller comes up, the getDefaultAzureCredential function will hammer the Azure API with login requests and get rate limited for a few minutes, resulting in failed Kustomize runs.

It would be preferable to cache the auth token and reuse it, rather than retrieve a new one on each SOPS decryption.

https://github.com/fluxcd/kustomize-controller/blob/main/internal/sops/azkv/keysource.go#L216

apeschel avatar Apr 21 '23 20:04 apeschel