[FLINK-30231] Update to Fabric8 Kubernetes Client to a version that has automatic renewal of service account tokens

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.2
• Fix Version/s: 1.17.0
• Component/s: Deployment / Kubernetes
• Labels: pull-request-available

Environment

Kubernetes 1.23 environment provided by Amazon Web Services managed Kubernetes service (EKS), using Flink 1.15.2.

• Assignee: ouyangwulin
• Reporter: Chris Thomson
• Created: 28/Nov/22 21:50
• Updated: 11/Jan/23 10:25
• Resolved: 05/Jan/23 18:31

Description

The Fabric8 Kubernetes Client library was updated to account for Kubernetes configuration changes that result in service account tokens becoming bounded in duration, needing to be renewed after an hour. The AWS managed Kubernetes service (AWS EKS) currently has a configuration change that extends the one hour bounded duration for the account to 90 days but this will eventually be removed by AWS and  produces warnings.

It appears that Fabric8 Kubernetes Client library version 5.12.4 is the closest version to 5.12.3 that is currently in use by the Apache Flink project to contain https://github.com/fabric8io/kubernetes-client/issues/2271.

Issue Links

• links to: GitHub Pull Request #21595
• links to: GitHub Pull Request #21599