Automatically Cleanup Expired Tokens in Datahub via Ingestion Source

Original Slack Thread

Hi !

Does datahub automatically cleanup all the expired tokens? Is there any setting with which we can achieve this automatically instead of making API calls to revoke the access token?

There is a „ingestion source“, which can be scheduled to cleanup expired tokens: https://datahubproject.io/docs/generated/ingestion/sources/datahubgc/|https://datahubproject.io/docs/generated/ingestion/sources/datahubgc/

See also: https://github.com/datahub-project/datahub/pull/10085|https://github.com/datahub-project/datahub/pull/10085

However I would expect that from a security point of view, it is not necessary to cleanup expired tokens, as those tokens should not work anymore once they see expired (otherwise the whole expiration thing would make no sense).

<@U03GWPR6FSS> How do we setup this GC on a k8s environment?