Token file reload

[geotransformer]

Hi team,
We are using Python, java, Go Kubernetes client in our microservices. Recently we have some token expiration issue for some deployment running for more than 1 years.

Calico issue: projectcalico/calico#5910
Java-client issue: fabric8io/kubernetes-client#4264

This is because K8s had some change for service account token renew
Since k8s 1.21, service account tokens have an lifespan of one hour (short-lived & rotation). The token expiration is 365 days actually.

I am wondering for GO client code in the below. Is there any token reloading?

client-go/rest/config.go

Line 511 in 9e63bf0

func InClusterConfig() (*Config, error) {

[liggitt]

I am wondering for GO client code in the below. Is there any token reloading?

Yes, setting BearerTokenFile in that method initiates a background process that rereads the token file once a minute.

[liggitt]

the refresh is set up in

client-go/transport/round_trippers.go

Line 52 in 9e63bf0

rt, err = NewBearerAuthWithRefreshRoundTripper(config.BearerToken, config.BearerTokenFile, rt)

, for reference

[liggitt]

k8s.io/client-go versions v0.15.0+ reload tokens automatically.