kube-aws-iam-controller
kube-aws-iam-controller copied to clipboard
Are credentials persistent?
I need a mechanism where credentials obtained by Pod are persistent. Are they persistent based on IAM role or they are valid for certain amount of time and must be obtained again?
The individual credentials are valid for 1 hour by default and are refreshed by the controller. It's expected that the AWS SDK automatically refreshes (e.g. reloads the newly refreshed credentials as needed). If the AWS SDK is configured as described here then this will work.