Tag See all →

#aws-ecr

1 stories

Banner: Kubernetes pods failing to pull ECR images because the registry token expired

DevOps & CI/CD Bug Report

ImagePullBackOff from ECR after 12 hours: no basic auth credentials

Ryan Pham · Feb 12, 2025 · 6 min read

Our self-managed cluster pulled images from ECR fine after setup and failed every morning with no basic auth credentials. The imagePullSecret held an ECR token that expires after 12 hours. We switched to the kubelet credential provider so nodes fetch fresh tokens themselves.