search

fabric8io / fluent-plugin-kubernetes_metadata_filter

Enrich your fluentd events with Kubernetes metadata
Apache License 2.0
350 stars 166 forks source link

k8s 1.22 - bearer tokens from mounts needs to be refreshed #323

Closed kjetijor closed 2 years ago

kjetijor commented 2 years ago

k8s 1.22 starts enforcing lifetime for the bearer tokens mounted in to the pod, this means they'll go stale after an hour, and we'll start getting rejected by the k8s api servers.

See: https://github.com/abonas/kubeclient/issues/530

jcantrill commented 2 years ago

Resolving as I believe the change merged here https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter/pull/330 addresses the issue and is released https://rubygems.org/gems/fluent-plugin-kubernetes_metadata_filter/versions/2.10.0

Please reopen if you determine otherwise

cben commented 2 years ago

As I wrote on #328, this was not addressed.

HarleyB123 commented 2 years ago

Any updates on when this will be fixed?

jcantrill commented 2 years ago

@cben Based upon your original response in #328, I agree we should continue to pursue your proposed changes. Please review my code comments.

prashil-g commented 2 years ago

Any update on this? I see fluentbit : https://github.com/fluent/fluent-bit/issues/5445 fix shipped with 1.9.4.

jcantrill commented 2 years ago

Any update on this? I see fluentbit : https://github.com/fluent/fluent-bit/issues/5445 fix shipped with 1.9.4.

This is a plugin for fluentd which is completely unrelated to to fluentbit

PettitWesley commented 2 years ago

Here is another way of doing it, reactively refresh the token when you get an Unauthorized error: https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter/pull/337

jcantrill commented 2 years ago

Released https://rubygems.org/gems/fluent-plugin-kubernetes_metadata_filter/versions/2.11.1