Skip to content

any ways to refresh sa token mount by secret rather than use token request api ? #7108

Open
@H1115372943

Description

@H1115372943

Hi team:

problems:
currently when we are using the k8s - client, we have encountered an issue with the expiration of the sa token, which has led to the API not being able to be called normally.

versions
fabric8io:5.6
k8s:1.21.7

others
After the pod has been running for a while, an error "token has expired" occurs. By checking the k8s changelog, we found that starting from version 1.21, due to the BoundServiceAccountTokenVolume feature, the token has an expiration time.

The official also recommends using the token through TokenRequest. However, since it is not easy for us to upgrade fabric8io to 6.8, is the only option currently to manually create a long - term token and mount it at /var/run/secrets/kubernetes.io/serviceaccount/token?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions