Adding default poll interval

lib/config/configuration.go

@@ -26,6 +26,7 @@ import (
 	"context"
 	"crypto/x509"
 	"errors"
+	"github.com/go-ldap/ldap/v3"
 	"io"
 	"io/fs"
 	"log/slog"
@@ -43,7 +44,6 @@ import (
 	"time"
 	"unicode"
 
-	"github.com/go-ldap/ldap/v3"
 	"github.com/gravitational/trace"
 	log "github.com/sirupsen/logrus"
 	kyaml "k8s.io/apimachinery/pkg/util/yaml"
@@ -1751,7 +1751,9 @@ kubernetes matchers are present`)
 				AssumeRole: assumeRole,
 			})
 		}
-		tMatcher.PollInterval = types.Duration(fc.Discovery.AccessGraph.PollInterval)
+		if fc.Discovery.AccessGraph.PollInterval > 0 {
+			tMatcher.PollInterval = types.Duration(fc.Discovery.AccessGraph.PollInterval)
+		}
 		cfg.Discovery.AccessGraph = &tMatcher
 	}
 

lib/srv/discovery/access_graph.go

@@ -48,6 +48,8 @@ const (
 	// batchSize is the maximum number of resources to send in a single
 	// request to the access graph service.
 	batchSize = 500
+	// defaultPollInterval is the default interval between polling for access graph resources
+	defaultPollInterval = 15 * time.Minute
 )
 
 // errNoAccessGraphFetchers is returned when there are no TAG fetchers.
@@ -368,6 +370,9 @@ func (s *Server) initializeAndWatchAccessGraph(ctx context.Context, reloadCh <-c
 	currentTAGResources := &aws_sync.Resources{}
 	s.Log.InfoContext(ctx, "Access graph service poll interval", "poll_interval", s.Config.Matchers.AccessGraph.PollInterval)
 	tickerInterval := time.Duration(s.Config.Matchers.AccessGraph.PollInterval)
+	if tickerInterval <= 0 {
+		tickerInterval = defaultPollInterval
+	}
 	ticker := time.NewTicker(tickerInterval)
 	defer ticker.Stop()
 	for {