Add support for AWS ecr:GetAuthorizationToken (alternative to imagePullSecret)

[Dynatrace-Jeroen-Hautekeete]

Hi,
In order to download images from custom registries, it is required to have an imagepullsecret available to fetch the images.

On AWS platform, the credential created from aws-cli for docker login will expire after 12 hours, so for Dynatrace operator to support dynamic scaling, this secret needs to be updated at least 2x/day.

Can an alternative be implemented for AWS, to use the ecr:GetAuthorizationToken API (IAM role-based) instead of reading a static secret ?

WKR.

[luhi-DT]

Hi, please keep in mind that this is a feature request, which will be handles in our community. However we are working on a solution to improve this situation for the next release. Thanks!

[github-actions]

Thank you for opening a Dynatrace Operator Issue. We've identified and tagged the issue as a "Feature request".

Dynatrace reviews feature requests in the Dynatrace community rather than Github. This helps our team consolidate, rank, and prioritize important input like yours.

Please search for similar requests, collaborate, and ask questions using the link above. Remember to add the labels "kubernetes" and "dynatrace-operator" to help get the attention you deserve.

Thanks for your help!

[mtalbot]

@luhi-DT Was there any update on this solution as I am effected by this