Browse Source

Reduce refreshInterval example for ACR (#4078)

The old example used a `refreshInterval` value of 12h for the ACR access token. This change reduces that to 3h instead, since that is the expiration time for Service Principal authentication tokens:

https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli#service-principal

Service principals are not the only way to authenticate towards ACR. In fact, two other ways (`managedIdentity` and `workloadIdentity`) are also outlined in the docs. I was unable to find any documentation in Azure for the default expiration time for those tokens, so as far as I know it is always 3 hours. Thus I think we should reflect this in our examples.

Signed-off-by: Andreas Lindhé <7773090+lindhe@users.noreply.github.com>
Andreas Lindhé 1 year ago
parent
commit
51fabd49a5
1 changed files with 1 additions and 1 deletions
  1. 1 1
      docs/snippets/generator-acr-example.yaml

+ 1 - 1
docs/snippets/generator-acr-example.yaml

@@ -11,7 +11,7 @@ spec:
           apiVersion: generators.external-secrets.io/v1alpha1
           kind: ACRAccessToken
           name: my-azurecr
-  refreshInterval: 12h
+  refreshInterval: 3h
   target:
     name: azurecr-credentials
     template: