apiserver/plugin/pkg/authenticator/token/webhook
Lukasz Szaszkiewicz 49d90ce0ad DelegatingAuthenticationOptions TokenReview request timeout
it turns out that setting a timeout on HTTP client affect watch requests made by the delegated authentication component.
with a 10 second timeout watch requests are being re-established exactly after 10 seconds even though the default request timeout for them is ~5 minutes.

this is because if multiple timeouts were set, the stdlib picks the smaller timeout to be applied, leaving other useless.
for more details see a937729c2c/src/net/http/client.go (L364)

instead of setting a timeout on the HTTP client we should use context for cancellation.

Kubernetes-commit: d690d71d27c78f2f7981b286f5b584455ff30246
2021-04-09 13:20:51 +02:00
..
certs_test.go Fix staticcheck failures on apiserver/plugin/pkg/{authenticator, authorizer} 2020-10-22 21:47:17 +00:00
round_trip_test.go Switch kubelet/aggregated API servers to use v1 tokenreviews 2019-11-04 22:41:32 -05:00
webhook.go DelegatingAuthenticationOptions TokenReview request timeout 2021-04-09 13:20:51 +02:00
webhook_v1_test.go DelegatingAuthenticationOptions TokenReview request timeout 2021-04-09 13:20:51 +02:00
webhook_v1beta1_test.go DelegatingAuthenticationOptions TokenReview request timeout 2021-04-09 13:20:51 +02:00