This PR makes two changes to the token refresh system:
For GCP, the min_ttl is reduced to 4 minutes to avoid the race condition with the metadata server caching as described in the issue
A backoff has been added to the token refresh logic, such that if the current token isn't yet expired, but we've recently attempted to refresh it (currently hard-coded to within the past 100ms) we won't attempt to refresh and will just return the cached one. This should help avoid the TokenCache from hammering the underlying token issuing system in the case that it's serving a cached token that's within the min_ttl
mwylde
commented
3 weeks ago
Which issue does this PR close?
Closes #6625.
Rationale for this change
See #6625
What changes are included in this PR?
This PR makes two changes to the token refresh system:
Are there any user-facing changes?
No