Uploaded image for project: 'OpenShift Console'
  1. OpenShift Console
  2. CONSOLE-3524

Add token creation to Service Accounts

    XMLWordPrintable

Details

    • False
    • None
    • False

    Description

      See https://github.com/openshift/console/pull/12589.

      We need to add token creation to Service Accounts to replace the removed `Download kubeconfig file`, but the addition of token creation needs design.  We may want to account for optionally setting the expiration duration and/or binding the token to a secret.

      See https://docs.openshift.com/container-platform/4.12/cli_reference/openshift_cli/developer-cli-commands.html#oc-create-token

      Relevant CLI code: https://github.com/kubernetes/kubectl/blob/77a7b65409fc364fa3ff37060cc9342dc0527292/pkg/cmd/create/create_token.go#L228-L268

      Background: https://redhat-internal.slack.com/archives/C6A3NV5J9/p1676903843342839

      Before realizing adding token creation was going to be more involved and require some design, I had stubbed out token creation:

          coFetchJSON
      .post(`${k8sBasePath}/api/v1/namespaces/${namespace}/serviceaccounts/${name}/token`, {
        kind: 'TokenRequest',
        apiVersion: 'authentication.k8s.io/v1',
        metadata: { creationTimestamp: null },
        spec: { audiences: null, expirationSeconds: null, boundObjectRef: null },
        status: { token: '', expirationTimestamp: null },
      })
      .then((res) => {
        console.log('CONSOLE LOG: res', res);
      })
      .catch((e) => console.log('CONSOLE LOG: e', e));

      Attachments

        Issue Links

          is caused by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-7308 Download kubeconfig for ServiceAccount returns error

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          links to

          GitHub openshift/console#12589: OCPBUGS-7308: remove 'Download kubeconfig file' from ServiceAccounts

          Activity

            People

              Unassigned Unassigned
              rhn-engineering-rhamilto Robb Hamilton
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated: