Token retrieval takes too long

[matejvasek]

While investigating performance issue of kpack/lifecycle I found out that most of the time is spend by auth token retrieval.
It seems to take around two minutes. Any ideas what could be wrong?

Stack:

net/http.(*Client).Do
github.com/Azure/go-autorest/autorest/adal.retryForIMDS
github.com/Azure/go-autorest/autorest/adal.(*ServicePrincipalToken).refreshInternal
github.com/Azure/go-autorest/autorest/adal.(*ServicePrincipalToken).EnsureFreshWithContext
github.com/chrismellard/docker-credential-acr-env/pkg/registry.GetRegistryRefreshTokenFromAADExchange
github.com/chrismellard/docker-credential-acr-env/pkg/credhelper.ACRCredHelper.Get
github.com/google/go-containerregistry/pkg/authn.wrapper.Resolve
github.com/buildpacks/lifecycle/auth.ReferenceForRepoName
github.com/buildpacks/lifecycle/auth.buildAuthConfigs
github.com/buildpacks/lifecycle/auth.NewResolvedKeychain
github.com/buildpacks/lifecycle/auth.DefaultKeychain
main.(*exportCmd).Privileges
github.com/buildpacks/lifecycle/cmd/lifecycle/cli.Run
main.main
runtime.main

[matejvasek]

cc @smile37773 @zhoufenqin

[matejvasek]

@smile37773 please provide details if possible.

[smile37773]

I use KPack to build images, see more details in https://github.com/pivotal/kpack/blob/main/docs/tutorial.md.
When I use acr to host my image, it takes 6 minutes to complete the build. But when I redirect the image to docker hub, it takes 30s to complete the build.

@matejvasek found the most of the time is spend by auth token retrieval.

The credential we used is the basic-auth secret in k8s.

[matejvasek]

There are some updates:
buildpacks/lifecycle#1007 (comment)
buildpacks/lifecycle#1007 (comment)