AthenZ / k8s-athenz-sia

Apache License 2.0
1 stars 7 forks source link

token file output feature #95

Open WindzCUHK opened 5 months ago

WindzCUHK commented 5 months ago

Description

Type of change

Flags


Checklist

Checklist for maintainer

WindzCUHK commented 5 months ago

expectation (not tested)

  1. mode=init, fatal when ALL preset tokens failed
    1. mode=init, SOME preset fails => output valid tokens, exit code == 0
      ERROR[2024-03-05T20:06:27+09:00] Failed to refresh tokens: PostAccessTokenRequest failed for target [{user.windz.provider:role.self,,0,0}], err: 403 postaccesstokenrequest: principal user.windz.instance.mac is not included in the requested role(s) in domain user.windz.provider. Retrying in 5.226087174s
      ...
      INFO[2024-03-05T20:12:23+09:00] Token cache updated. accesstoken:success[1],error[1]; roletoken:success[1],error[1]
      ERROR[2024-03-05T20:07:08+09:00] Failed to fetch tokens after multiple retries: PostAccessTokenRequest failed for target [{user.windz.provider:role.self,,0,0}], err: 403 postaccesstokenrequest: principal user.windz.instance.mac is not included in the requested role(s) in domain user.windz.provider
      ...
      INFO[2024-03-05T20:20:03+09:00] [New Access Token] Domain: user.windz.provider, Role: dummy-role
      DEBUG[2024-03-05T20:20:03+09:00] Saving Access Token[741 bytes] at .local/user.windz.provider:role.dummy-role.accesstoken 
      INFO[2024-03-05T20:20:03+09:00] [New Role Token] Domain: user.windz.provider, Role: dummy-role
      DEBUG[2024-03-05T20:20:03+09:00] Saving Role Token[344 bytes] at .local/user.windz.provider:role.dummy-role.roletoken
      ...
      INFO[2024-03-05T20:07:08+09:00] Shutdown completed!
    2. mode=init, ALL preset fails => exit code == 1
      ERROR[2024-03-05T20:09:30+09:00] Failed to refresh tokens: PostAccessTokenRequest failed for target [{user.windz.provider:role.dummy-rolee,,0,0}], err: 403 postaccesstokenrequest: principal user.windz.instance.mac is not included in the requested role(s) in domain user.windz.provider. Retrying in 3.470331765s
      ...
      INFO[2024-03-05T20:12:23+09:00] Token cache updated. accesstoken:success[0],error[2]; roletoken:success[0],error[2]
      ...
      ERROR[2024-03-05T20:09:44+09:00] Failed to fetch tokens after multiple retries: PostAccessTokenRequest failed for target [{user.windz.provider:role.self,,0,0}], err: 403 postaccesstokenrequest: principal user.windz.instance.mac is not included in the requested role(s) in domain user.windz.provider
      ...
      ERROR[2024-03-05T20:12:23+09:00] Error starting token provider[Unable to fetch ANY tokens for init mode] 
      FATAL[2024-03-05T20:12:23+09:00] Unable to fetch ANY tokens for init mode