seanghaeli opened a new issue, #74306:
URL: https://github.com/apache/airflow/issues/74306

   ### What happened
   
   With `async_pod_creation = True` and a kubeconfig that authenticates through 
an exec plugin (e.g. EKS), pod creation keeps sending the first token after it 
expires, so it fails with 401 until the scheduler restarts.
   
   The sync client is fine because `kubernetes` installs a 
`refresh_api_key_hook`. `kubernetes_asyncio` doesn't, and the async client is 
built once and cached (`kubernetes_executor_utils.py:714`).
   
   ### What you think should happen instead
   
   The async client refreshes its token the same way the sync one does.
   
   ### How to reproduce
   
   Use an exec plugin kubeconfig with short-lived tokens, enable 
`async_pod_creation`, and let the scheduler run past the first token's expiry.
   
   cncf-kubernetes 10.23.0, kubernetes 36.0.3, kubernetes_asyncio 36.1.0. Happy 
to submit a PR.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to