search

headlamp-k8s / headlamp

A Kubernetes web UI that is fully-featured, user-friendly and extensible
https://headlamp.dev
Apache License 2.0
2.22k stars 156 forks source link

OIDC token times out too quickly on web client #2358

Open sarg3nt opened 3 weeks ago

sarg3nt commented 3 weeks ago

We have Headlamp working with OIDC and Azure but are running into the issue of the token expiring far too quickly. My Azure team tells me this is usually a setting in the app initiating the request.

I also found closed ticket https://github.com/headlamp-k8s/headlamp/issues/209 where @joaquimrocha talks a little about this.

if you have access with your token throughout the navigation in Headlamp but the problem is apparently a timeout when using the token, maybe increasing the tokens' lifespan will help. In KeyCloak this is done in the settings of the client you are using, under "Advanced Settings > Access Token Lifespan".

But I do not know what he means by "the client" Maybe the windows version of Headlamp?

Is there a way to set this in the Helm chart?

joaquimrocha commented 3 weeks ago

I think that comment was about KeyCloak. If you are using Azure, I think something different needs to be done. Adding @ashu8912 and @yolossn should they know more here.