I wrote a simple Kubernetes operator for renewing AWS container registry (ECR) credentials in several namespaces. The credentials expire every 12h, and the Kubernetes secret for pulling the images from ECR need to be renewed whenever a workload is to be created/updated. The operator takes care of renewing the Kubernetes secret every 12h in all the configured namespaces: https://github.com/zak905/kube-ecr-secrets-operator