Hello. With the use of

ecr-credential-provider

on a non-cloud instance (no IAM roles), where would be the best place to store the AWS static credentials? With RKE1 it was possible to add it as part of the

cluster.yml

where you define

extra_env

for

kubelet

which triggered a restart of the kubelet process, but I don't see a similar directive for it with RKE2.

Plugin credentials don't come from the kubelet, rather the kubelet gets them from the provider - so I'm not sure why you would want to put them in kubelet config or restart the kubelet. The ECR credential provider should load them from any of the usual locations... env vars, shared credentials file, and so on .

Makes sense, thanks.