apiserver/pkg/authentication/authenticatorfactory
Lukasz Szaszkiewicz 49d90ce0ad DelegatingAuthenticationOptions TokenReview request timeout
it turns out that setting a timeout on HTTP client affect watch requests made by the delegated authentication component.
with a 10 second timeout watch requests are being re-established exactly after 10 seconds even though the default request timeout for them is ~5 minutes.

this is because if multiple timeouts were set, the stdlib picks the smaller timeout to be applied, leaving other useless.
for more details see a937729c2c/src/net/http/client.go (L364)

instead of setting a timeout on the HTTP client we should use context for cancellation.

Kubernetes-commit: d690d71d27c78f2f7981b286f5b584455ff30246
2021-04-09 13:20:51 +02:00
..
delegating.go DelegatingAuthenticationOptions TokenReview request timeout 2021-04-09 13:20:51 +02:00
loopback.go move genericapiserver authenticator and authorizer factories 2017-01-27 08:47:01 -05:00
requestheader.go allow a verifyoptionsfunc to indicate that no certpool is available 2019-11-06 10:38:45 -05:00