Skip to content

daily checks to check k8s token's validity #5692

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
junminahn opened this issue May 22, 2025 · 0 comments
Open

daily checks to check k8s token's validity #5692

junminahn opened this issue May 22, 2025 · 0 comments
Assignees

Comments

@junminahn
Copy link
Collaborator

junminahn commented May 22, 2025

Q. How to test tokens validity
Q. How to get the tokens for Airflow tasks X

We have Airflow schedular tasks:
- Option 1: get tokens from Vault using annotations -> k9s api endpoint to test the tokens
- Option 2: get tokens from Vault using annotations -> oc login command to test the tokens
- Option 3: copy tokens from vault into airflow secret -> k9s api endpoint to test the tokens
- not secure, not automatically synced;
- Option 4: hit application endpoints -> metrics endpoint, deletion check endpoint
- Pros: no need to create new endpoints
- Cons: metrics, deletion check requires privielges checks because those information is somewhat sensitive; in airflow task, we will need to prepare the mechanism to pass the privielge checks.
efficiency: no need to know specific project's information
- Option 5: hit application new endpoint -> that checks the validity of the tokens > true/false

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants