question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

spring-cloud-kubernetes-fabric8-leader v2.1.3 does not refresh k8s auth tokens

See original GitHub issue

Describe the bug

When using spring-cloud-kubernetes-fabric8-leader v2.1.3, the auth tokens against k8s aren’t refreshed automatically.

Fabric8 Kubernetes Client version

5.10.2 (according to the spring-cloud-kubernetes-fabric8-autoconfig v2.1.3 POM)

Steps to reproduce

We are getting warnings in our GCP audit logs from our usage of spring leader election:

[authentication.k8s.io/stale-token](http://authentication.k8s.io/stale-token): 
  "subject: system:serviceaccount:default:my-app-api, seconds after warning threshold: 798"

spring-cloud-kubernetes-fabric8-leader should have their k8s libraries updated to be able to refresh the auth token. The kubernetes java library version 14.0.0 or later should be OK since it includes a token refresh fix.

Expected behavior

The k8s auth tokens should be refreshed regularly.

Runtime

Kubernetes (vanilla)

Kubernetes API Server version

1.22

Environment

GKE

Fabric8 Kubernetes Client Logs

No response

Additional context

No response

Issue Analytics

  • State:open
  • Created a year ago
  • Comments:8 (3 by maintainers)

github_iconTop GitHub Comments

2reactions
manusacommented, Aug 30, 2022

We’re not involved with that project, but I hope so.

I recall @wind57 was interested on upgrading https://github.com/spring-cloud/spring-cloud-kubernetes/issues/1048, maybe he can provide more details.

1reaction
manusacommented, Aug 30, 2022

Maybe not for all cluster flavors, but for most of them yes.

It’ll be part of 6.1.0 which I’m currently preparing to release.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Spring Cloud Kubernetes
Spring Cloud Kubernetes provides implementations of well known Spring Cloud interfaces allowing developers to build and run Spring Cloud applications on ...
Read more >
Authenticating | Kubernetes
Providers that don't return an id_token as part of their refresh token response aren't supported by this plugin and should use "Option 2"...
Read more >
Kubernetes - Auth Methods | Vault - HashiCorp Developer
The kubernetes auth method can be used to authenticate with Vault using a Kubernetes Service Account Token. This method of authentication makes it...
Read more >
Overview - Argo CD - Declarative GitOps CD for Kubernetes
Auth tokens for Argo CD management automation. ... <current-user-password> should be the current admin password. argocd account update-password \ --account ...
Read more >
Globus Auth API Reference
Clients SHOULD NOT use Globus Auth resource URL paths that are prefixed by /p/ ... A refresh token allows your application to obtain...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found