aws / aws/containers-roadmap

[EKS] [request]: Allow user to modify the kube-apiserver flag --service-account-max-token-expiration

Open
#1,836 0 comments 18 reactions 0 assignees View on GitHub
EKS Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
I would like to make requests to TokenRequest API for tokens that have expiration > 24 hours. When I try to make a request to TokenRequest API for 30 day expiration, I receive a token that has 1 day expiration.

**Which service(s) is this request for?**
EKS

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
This cluster is a development cluster, and I don't want users to have to fetch a new token every day in order to access this development cluster.

**Are you currently working around this issue?**
Yes, users have to refresh their token every day. But for kubernetes clusters with other cloud providers this is not a restriction, so other cloud provider kubernetes clusters have a better user experience.

Contributor guide

Open the contributing guide

Research direction

The request concerns EKS and the Kubernetes TokenRequest API, specifically kube-apiserver's --service-account-max-token-expiration flag. No repository files or tests are identified; begin by locating the EKS control-plane configuration surface and reviewing the current 24-hour behavior. Done means users can request tokens longer than 24 hours, including a 30-day request, through a configurable maximum.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.