krisiasty/k2a-token-sync

Keeps ArgoCD's downstream cluster registrations valid using short-lived ServiceAccount tokens it mints and rotates itself, replacing the permanent credential that argocd cluster add leaves behind.

1 good first / help-wanted issue · Go · last activity Aug 7, 2026

1 stars 0 forks 1 watchers Go Apache License 2.0

argocd automation credential-rotation gitops golang kubernetes kubernetes-controller serviceaccount-tokens tokenrequest

View on GitHub

1 Open Issue Need Help Last updated: Aug 7, 2026

Open Issues Need Help

View All on GitHub

An unclassified reconcile failure reports the endpoint as unreachable 3 months ago

bug good first issue

krisiasty/k2a-token-sync

Keeps ArgoCD's downstream cluster registrations valid using short-lived ServiceAccount tokens it mints and rotates itself, replacing the permanent credential that argocd cluster add leaves behind.

#argocd#automation#credential-rotation#gitops#golang#kubernetes#kubernetes-controller#serviceaccount-tokens#tokenrequest