{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/10160","repository_url":"https://api.github.com/repos/openshift/openshift-ansible","labels_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/10160/labels{/name}","comments_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/10160/comments","events_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/10160/events","html_url":"https://github.com/openshift/openshift-ansible/pull/10160","id":362110088,"node_id":"MDExOlB1bGxSZXF1ZXN0MjE2OTEyMDE0","number":10160,"title":"set kibana session timeout to 168 hours","user":{"login":"josefkarasek","id":4786168,"node_id":"MDQ6VXNlcjQ3ODYxNjg=","avatar_url":"https://avatars3.githubusercontent.com/u/4786168?v=4","gravatar_id":"","url":"https://api.github.com/users/josefkarasek","html_url":"https://github.com/josefkarasek","followers_url":"https://api.github.com/users/josefkarasek/followers","following_url":"https://api.github.com/users/josefkarasek/following{/other_user}","gists_url":"https://api.github.com/users/josefkarasek/gists{/gist_id}","starred_url":"https://api.github.com/users/josefkarasek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/josefkarasek/subscriptions","organizations_url":"https://api.github.com/users/josefkarasek/orgs","repos_url":"https://api.github.com/users/josefkarasek/repos","events_url":"https://api.github.com/users/josefkarasek/events{/privacy}","received_events_url":"https://api.github.com/users/josefkarasek/received_events","type":"User","site_admin":false},"labels":[{"id":681664198,"node_id":"MDU6TGFiZWw2ODE2NjQxOTg=","url":"https://api.github.com/repos/openshift/openshift-ansible/labels/size/XS","name":"size/XS","color":"009900","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-09-20T09:57:51Z","updated_at":"2018-09-24T14:36:35Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/openshift/openshift-ansible/pulls/10160","html_url":"https://github.com/openshift/openshift-ansible/pull/10160","diff_url":"https://github.com/openshift/openshift-ansible/pull/10160.diff","patch_url":"https://github.com/openshift/openshift-ansible/pull/10160.patch"},"body":"Since we require users to go through one more round of authorization when they go from the webconsole, make sure the session is valid for more than just one day. I suggest one week, as that's the default settings of the [oauth proxy](https://github.com/openshift/oauth-proxy/blob/master/options.go#L114).\r\n\r\nTo achieve that, we need to redefine the default 24 hours in [master-config.yaml](https://docs.okd.io/latest/install_config/configuring_authentication.html#token-options) by setting `accessTokenMaxAgeSeconds` in kibana [oauthClient](https://docs.okd.io/latest/architecture/additional_concepts/other_api_objects.html#accessTokenMaxAgeSeconds) object."},"comment":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/comments/423997347","html_url":"https://github.com/openshift/openshift-ansible/pull/10160#issuecomment-423997347","issue_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/10160","id":423997347,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMzk5NzM0Nw==","user":{"login":"josefkarasek","id":4786168,"node_id":"MDQ6VXNlcjQ3ODYxNjg=","avatar_url":"https://avatars3.githubusercontent.com/u/4786168?v=4","gravatar_id":"","url":"https://api.github.com/users/josefkarasek","html_url":"https://github.com/josefkarasek","followers_url":"https://api.github.com/users/josefkarasek/followers","following_url":"https://api.github.com/users/josefkarasek/following{/other_user}","gists_url":"https://api.github.com/users/josefkarasek/gists{/gist_id}","starred_url":"https://api.github.com/users/josefkarasek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/josefkarasek/subscriptions","organizations_url":"https://api.github.com/users/josefkarasek/orgs","repos_url":"https://api.github.com/users/josefkarasek/repos","events_url":"https://api.github.com/users/josefkarasek/events{/privacy}","received_events_url":"https://api.github.com/users/josefkarasek/received_events","type":"User","site_admin":false},"created_at":"2018-09-24T14:36:35Z","updated_at":"2018-09-24T14:36:35Z","author_association":"CONTRIBUTOR","body":"@vrutkovs can you pls help me with the `assert` statement?\r\n\r\n```\r\n- name: Check that kibana session timeout is positive number\r\n  assert:\r\n    that:\r\n    - \"openshift_logging_kibana_session_timeout_seconds is defined\"\r\n    - \"openshift_logging_kibana_session_timeout_seconds | int >= 0\"\r\n    msg: \"Provided value for 'openshift_logging_kibana_session_timeout_seconds' is invalid. Only positive integers are allowed.\"\r\n```\r\n...is skipped...\r\n```\r\nskipping: [localhost] => {\r\n    \"changed\": false, \r\n    \"generated_timestamp\": \"2018-09-24 14:21:11.035795\", \r\n    \"skip_reason\": \"Conditional result was False\"\r\n}\r\n```\r\n...but I don't understand why.. It's the first task in that role..."}}
{"actor":{"display_login":"josefkarasek"}}