Does Podman support automatic expiry or rotation of registry credentials in auth.json?
Podman stores registry credentials from podman login in a plain-text authfile such as ~/.config/containers/auth.json , and the documented behavior includes no native expiry timestamp or rotation hook for those entries. TLS client-certificate authentication is validated against the configured CA, so an expired client certificate makes pull and push operations