Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for int128/kubelogin #49

Open
jkroepke opened this issue Sep 25, 2021 · 2 comments
Open

Support for int128/kubelogin #49

jkroepke opened this issue Sep 25, 2021 · 2 comments
Assignees

Comments

@jkroepke
Copy link

Is your feature request related to a problem? Please describe.
Each time, the refresh_token gets expired, the config needs to be generated.

Describe the solution you'd like
I would like it know if you could add a kubeconfig file for the kubectl plugin https://github.com/int128/kubelogin, including a link for the installation manual.

Describe alternatives you've considered
Manual documentation.

Additional context
N/A

@fydrah
Copy link
Owner

fydrah commented Oct 8, 2021

Hello @jkroepke,

What are your TTL for both openid token & refresh token?
If your refresh token TTL is too low, you will have the same authentication issue with kubelogin (but instead, kubelogin open the browser for you).

About the additional configuration for kubelogin, you can override the existing html gotemplate with your own, with this you will be able to add your own documentation (which will include the link to download kubelogin if you want)

@fydrah
Copy link
Owner

fydrah commented Oct 8, 2021

e.g. for dex expiration config --> https://dexidp.io/docs/id-tokens/#expiration-and-rotation-settings

I use 6h for idtoken and 48h (validForIfNotUsed) for refresh token on my configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants