{"action":"opened","issue":{"url":"https://api.github.com/repos/kubernetes/dashboard/issues/2996","repository_url":"https://api.github.com/repos/kubernetes/dashboard","labels_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2996/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2996/comments","events_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2996/events","html_url":"https://github.com/kubernetes/dashboard/issues/2996","id":319060309,"number":2996,"title":"Chrome Smart Lock does not save Kubernetes Dashboard service account Bearer token","user":{"login":"michaelfig","id":457244,"avatar_url":"https://avatars0.githubusercontent.com/u/457244?v=4","gravatar_id":"","url":"https://api.github.com/users/michaelfig","html_url":"https://github.com/michaelfig","followers_url":"https://api.github.com/users/michaelfig/followers","following_url":"https://api.github.com/users/michaelfig/following{/other_user}","gists_url":"https://api.github.com/users/michaelfig/gists{/gist_id}","starred_url":"https://api.github.com/users/michaelfig/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaelfig/subscriptions","organizations_url":"https://api.github.com/users/michaelfig/orgs","repos_url":"https://api.github.com/users/michaelfig/repos","events_url":"https://api.github.com/users/michaelfig/events{/privacy}","received_events_url":"https://api.github.com/users/michaelfig/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-30T22:41:16Z","updated_at":"2018-04-30T22:41:16Z","closed_at":null,"author_association":"NONE","body":"##### Environment\r\n<!-- Describe how do you run Kubernetes and Dashboard. \r\n     Versions of Node.js, Go etc. are needed only from developers. To get them use console:\r\n     $ node --version\r\n     $ go version\r\n -->\r\n\r\n```\r\nDashboard version:1.8.3\r\nKubernetes version:1.9.6\r\nOperating system:Windows 10\r\nNode.js version:n/a\r\nGo version:n/a\r\nChrome version:66.0.3359.117 (Official Build) (64-bit)\r\n```\r\n\r\n##### Steps to reproduce\r\n<!-- Describe all steps needed to reproduce the issue. It is a good place to use numbered list. -->\r\n1. Install the dashboard with minimal roles.  Helm configuration file, dashboard.yaml, and installation command is below.\r\n1. Note that all of the configured ingresses use trusted TLS certificates.\r\n1. Configure a service account with privileges for the appropriate namespaces.\r\n1. Go to the configured Ingress, and enter the appropriate Bearer token.\r\n1. Dashboard has access to the configured role.\r\n1. Chrome offers to save the bearer token in Smart Lock (with no username).\r\n1. Click \"Update Password\".\r\n1. Sign out of dashboard.\r\n1. Select \"Token\" to log back in again.\r\n1. Click on the Token input box.\r\n\r\n```\r\n$ cat dashboard.yaml \r\ningress:\r\n  enabled: true\r\n  annotations:   \r\n    nginx.ingress.kubernetes.io/ssl-passthrough: \"true\"\r\n  tls:\r\n  - secretName: example-secret\r\n$ SUBDOMAIN=example.com\r\n$ helm install --namespace kube-system -n kubernetes-dashboard -f dashboard.yaml --set \"ingress.hosts[0]=dashboard.$SUBDOMAIN,ingress.tls[0].hosts[0]=dashboard.$SUBDOMAIN\" stable/kubernetes-dashboard\r\n$\r\n```\r\n\r\n##### Observed result\r\n<!-- Describe observed result as precisely as possible. -->\r\nChrome does not offer to fill out the token.\r\n\r\nUpon investigation, the password is not saved in Smart Lock under the configured hostname.\r\n\r\n##### Expected result\r\n<!-- Describe expected result as precisely as possible. -->\r\nChrome should offer to fill out the token from Smart Lock.\r\n\r\n##### Comments\r\n<!-- If you have any comments or more details, put them here. -->\r\nThis is probably a Chrome bug, but I'm reporting here first, since it seems to be specific to the Kubernetes Dashboard's login process and I'm hoping somebody else has an answer. ;)"}}
{"actor":{"display_login":"michaelfig"}}