Keeps ArgoCD's downstream cluster registrations valid using short-lived ServiceAccount tokens it mints and rotates itself, replacing the permanent credential that argocd cluster add leaves behind.

1 stars 0 forks 1 watchers Go Apache License 2.0
argocd automation credential-rotation gitops golang kubernetes kubernetes-controller serviceaccount-tokens tokenrequest
1 Open Issue Need Help Last updated: Aug 7, 2026

Open Issues Need Help

View All on GitHub

Keeps ArgoCD's downstream cluster registrations valid using short-lived ServiceAccount tokens it mints and rotates itself, replacing the permanent credential that argocd cluster add leaves behind.

Go
#argocd#automation#credential-rotation#gitops#golang#kubernetes#kubernetes-controller#serviceaccount-tokens#tokenrequest