Pod IP cache Refresh causing incorrect iam role credentials

[chaitushiva]

Problem Definition:

We have a pod 1 running with IP: 10.x.x.1 having an iam role "pod1-role".On successful termination of the pod 1 and before expiration of the respective credentials in the kiam server a new pod 2 with a diff role "pod2-role" is coming up with the pod 1 IP: 10.x.x.1 and providing pod1's credentials to the POD2.

Arguments we are passing to the kiam server are:

--session-duration=15m
--sync=1m

Any suggestions to over come this scenario?

[chaitushiva]

@pingles , Any inputs?