Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-38495

accessTokenInactivityTimeout doesn't work properly, getting Unauthorized while in the session

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.14
    • oauth-apiserver
    • None
    • Important
    • None
    • False
    • Hide

      None

      Show
      None

      Description of problem:

          With the following option, the user session gets expired after about 30~38 minutes. 
      
            tokenConfig:
          accessTokenInactivityTimeout: 900s
          accessTokenMaxAgeSeconds: 3600
      
      However, when setting the InactivityTimeout to 3600s, it doesn't get expired. 
      
            tokenConfig:
          accessTokenInactivityTimeout: 3600s
          accessTokenMaxAgeSeconds: 3600
      
      ERROR:
      [must-gather-g8cz7] OUT waiting for gather to complete
      [must-gather-g8cz7] OUT gather never finished: timed out waiting for the condition
      Unauthorized
      Unauthorized
      
      
      Error running must-gather collection:
          gather never finished for pod must-gather-g8cz7: timed out waiting for the condition
      
      Falling back to `oc adm inspect clusteroperators.v1.config.openshift.io` to collect basic cluster information.
      error running backup collection: Unauthorized

       

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          always

      Steps to Reproduce:

          1. Set accessTokenInactivityTimeout: 900s     
          2. Set accessTokenMaxAgeSeconds: 3600
          3.
          

      Actual results:

          User session gets expired too soon, accessTokenInactivitiyTimeout doesn't seem to work.

      Expected results:

          The accessTokenInactivityTimeout should work as expected

      Additional info:

          Reproduced the issue with loglevel=debug option

              rhn-support-dchong Daniel Chong
              rhn-support-dchong Daniel Chong
              Xingxing Xia Xingxing Xia
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: