DevOps & CI/CD
Bug Report
ImagePullBackOff from ECR after 12 hours: no basic auth credentials
Our self-managed cluster pulled images from ECR fine after setup and failed every morning with no basic auth credentials. The imagePullSecret held an ECR token that expires after 12 hours. We switched to the kubelet credential provider so nodes fetch fresh tokens themselves.