{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/dashboard/issues/2882","repository_url":"https://api.github.com/repos/kubernetes/dashboard","labels_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2882/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2882/comments","events_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2882/events","html_url":"https://github.com/kubernetes/dashboard/issues/2882","id":303477327,"node_id":"MDU6SXNzdWUzMDM0NzczMjc=","number":2882,"title":"Dashboard --token-ttl is not working","user":{"login":"Michael-Baylis","id":37182075,"node_id":"MDQ6VXNlcjM3MTgyMDc1","avatar_url":"https://avatars0.githubusercontent.com/u/37182075?v=4","gravatar_id":"","url":"https://api.github.com/users/Michael-Baylis","html_url":"https://github.com/Michael-Baylis","followers_url":"https://api.github.com/users/Michael-Baylis/followers","following_url":"https://api.github.com/users/Michael-Baylis/following{/other_user}","gists_url":"https://api.github.com/users/Michael-Baylis/gists{/gist_id}","starred_url":"https://api.github.com/users/Michael-Baylis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Michael-Baylis/subscriptions","organizations_url":"https://api.github.com/users/Michael-Baylis/orgs","repos_url":"https://api.github.com/users/Michael-Baylis/repos","events_url":"https://api.github.com/users/Michael-Baylis/events{/privacy}","received_events_url":"https://api.github.com/users/Michael-Baylis/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-03-08T13:22:13Z","updated_at":"2018-08-20T07:14:12Z","closed_at":"2018-03-26T17:03:40Z","author_association":"NONE","body":"##### Environment\r\n\r\nDashboard version: 1.8.3\r\nKubernetes version: 1.9.3\r\nOperating system: Ubuntu LTS 16.04\r\n\r\n##### Steps to reproduce\r\n1) Setup tokens in the api-server using --token-auth-file=/etc/kubernetes/pki/tokens.csv and restart\r\n2) Add --token-ttl=43200 to the dashboard deployment and restart\r\n\r\n##### Observed result\r\n1) Log on to the dashboard using a token\r\n2) Wait for 20 minutes\r\n3) Attempt to use dashboard\r\n4) Requires logging on again as it appear jwe still expiring after 15 minutes\r\n\r\n##### Expected result\r\nThat the jwetoken remains valid for 12 hours and we will not require authenticating until the 12 hours are up.\r\n\r\n##### Comments\r\ndashboard deployment yaml:-\r\n\r\n```\r\nkind: Deployment\r\napiVersion: apps/v1beta2\r\nmetadata:\r\n  labels:\r\n    k8s-app: kubernetes-dashboard\r\n  name: kubernetes-dashboard\r\n  namespace: kube-system\r\nspec:\r\n  replicas: 1\r\n  revisionHistoryLimit: 10\r\n  selector:\r\n    matchLabels:\r\n      k8s-app: kubernetes-dashboard\r\n  template:\r\n    metadata:\r\n      labels:\r\n\tk8s-app: kubernetes-dashboard\r\n    spec:\r\n      containers:\r\n      - name: kubernetes-dashboard\r\n        image: k8s.gcr.io/kubernetes-dashboard-amd64:v1.8.3\r\n        ports:\r\n\t- containerPort: 8443\r\n          protocol: TCP\r\n        args:\r\n          - --tls-key-file=k8sm.key\r\n          - --tls-cert-file=k8sm.crt\r\n          - --token-ttl=43200\r\n        volumeMounts:\r\n        - name: kubernetes-dashboard-certs\r\n          mountPath: /certs\r\n        - mountPath: /tmp\r\n          name: tmp-volume\r\n        livenessProbe:\r\n          httpGet:\r\n            scheme: HTTPS\r\n            path: /\r\n            port: 8443\r\n          initialDelaySeconds: 30\r\n          timeoutSeconds: 30\r\n      volumes:\r\n      - name: kubernetes-dashboard-certs\r\n        secret:\r\n          secretName: kubernetes-dashboard-certs\r\n      - name: tmp-volume\r\n        emptyDir: {}\r\n      serviceAccountName: kubernetes-dashboard\r\n      tolerations:\r\n      - key: node-role.kubernetes.io/master\r\n        effect: NoSchedule\r\n      affinity:\r\n        nodeAffinity:\r\n          requiredDuringSchedulingIgnoredDuringExecution:\r\n            nodeSelectorTerms:\r\n              - matchExpressions:\r\n                - key: \"node-role.kubernetes.io/master\"\r\n                  operator: \"Exists\"\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/dashboard/issues/comments/414219359","html_url":"https://github.com/kubernetes/dashboard/issues/2882#issuecomment-414219359","issue_url":"https://api.github.com/repos/kubernetes/dashboard/issues/2882","id":414219359,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNDIxOTM1OQ==","user":{"login":"ishanagi","id":11545285,"node_id":"MDQ6VXNlcjExNTQ1Mjg1","avatar_url":"https://avatars3.githubusercontent.com/u/11545285?v=4","gravatar_id":"","url":"https://api.github.com/users/ishanagi","html_url":"https://github.com/ishanagi","followers_url":"https://api.github.com/users/ishanagi/followers","following_url":"https://api.github.com/users/ishanagi/following{/other_user}","gists_url":"https://api.github.com/users/ishanagi/gists{/gist_id}","starred_url":"https://api.github.com/users/ishanagi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ishanagi/subscriptions","organizations_url":"https://api.github.com/users/ishanagi/orgs","repos_url":"https://api.github.com/users/ishanagi/repos","events_url":"https://api.github.com/users/ishanagi/events{/privacy}","received_events_url":"https://api.github.com/users/ishanagi/received_events","type":"User","site_admin":false},"created_at":"2018-08-20T07:14:12Z","updated_at":"2018-08-20T07:14:12Z","author_association":"NONE","body":"@rosskevin I have no idea why it suddenly started working for me when I created a new cluster and why it wasn't working in the first place, I am afraid.  All I know it is still working with a 12 hour token.  Fairly sure there is a defect in there somewhere,  but it is very subtle."}}
{"actor":{"display_login":"ishanagi"}}