spring-cloud-kubernetes-fabric8-leader v2.1.3 does not refresh k8s auth tokens
See original GitHub issueDescribe the bug
When using spring-cloud-kubernetes-fabric8-leader v2.1.3, the auth tokens against k8s aren’t refreshed automatically.
Fabric8 Kubernetes Client version
5.10.2 (according to the spring-cloud-kubernetes-fabric8-autoconfig v2.1.3 POM)
Steps to reproduce
We are getting warnings in our GCP audit logs from our usage of spring leader election:
[authentication.k8s.io/stale-token](http://authentication.k8s.io/stale-token):
"subject: system:serviceaccount:default:my-app-api, seconds after warning threshold: 798"
spring-cloud-kubernetes-fabric8-leader should have their k8s libraries updated to be able to refresh the auth token. The kubernetes java library version 14.0.0 or later should be OK since it includes a token refresh fix.
Expected behavior
The k8s auth tokens should be refreshed regularly.
Runtime
Kubernetes (vanilla)
Kubernetes API Server version
1.22
Environment
GKE
Fabric8 Kubernetes Client Logs
No response
Additional context
No response
Issue Analytics
- State:
- Created a year ago
- Comments:8 (3 by maintainers)
Top Results From Across the Web
Spring Cloud Kubernetes
Spring Cloud Kubernetes provides implementations of well known Spring Cloud interfaces allowing developers to build and run Spring Cloud applications on ...
Read more >Authenticating | Kubernetes
Providers that don't return an id_token as part of their refresh token response aren't supported by this plugin and should use "Option 2"...
Read more >Kubernetes - Auth Methods | Vault - HashiCorp Developer
The kubernetes auth method can be used to authenticate with Vault using a Kubernetes Service Account Token. This method of authentication makes it...
Read more >Overview - Argo CD - Declarative GitOps CD for Kubernetes
Auth tokens for Argo CD management automation. ... <current-user-password> should be the current admin password. argocd account update-password \ --account ...
Read more >Globus Auth API Reference
Clients SHOULD NOT use Globus Auth resource URL paths that are prefixed by /p/ ... A refresh token allows your application to obtain...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
We’re not involved with that project, but I hope so.
I recall @wind57 was interested on upgrading https://github.com/spring-cloud/spring-cloud-kubernetes/issues/1048, maybe he can provide more details.
Maybe not for all cluster flavors, but for most of them yes.
It’ll be part of 6.1.0 which I’m currently preparing to release.