authenticating with a google cloud access token fails successfully (500 OK)
kind/buglifecycle/stale
### What happened?
```
helm install my-kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --version 7.13.0
kubectl -n default port-forward svc/my-kubernetes-dashboard-kong-proxy 8443:443
gcloud config config-helper --format=json | jq .credential.access_token -r | pbcopy
```
<img width="1481" height="1124" alt="Image" src="https://github.com/user-attachments/assets/4bb65d87-84e6-4a6f-9085-9c10a9aa89fd" />
```console
$ kubectl logs -l app.kubernetes.io/name=kubernetes-dashboard-auth -f
I1006 18:18:59.162780 1 main.go:34] "Starting Kubernetes Dashboard Auth" version="1.3.0"
I1006 18:18:59.162889 1 init.go:48] Using in-cluster config
I1006 18:18:59.163178 1 main.go:43] "Listening and serving insecurely on" address="0.0.0.0:8000"
E1006 18:19:12.210143 1 handler.go:33] "Could not get user" err="MSG_LOGIN_UNAUTHORIZED_ERROR"
I1006 18:20:25.364739 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1006 18:20:25.364776 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1006 18:20:25.364785 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I1006 18:20:25.364792 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
2025/10/06 18:20:25 [Recovery] 2025/10/06 - 18:20:25 panic recovered:
interface conversion: jwt.Claims is nil, not jwt.MapClaims
runtime/iface.go:275 (0x40df30)
runtime/iface.go:285 (0x40dee9)
k8s.io/dashboard/auth/pkg/routes/me/me.go:60 (0x1a5c7f6)
k8s.io/dashboard/auth/pkg/routes/me/me.go:51 (0x1a5c649)
k8s.io/dashboard/auth/pkg/routes/me/handler.go:31 (0x1a5c4ad)
github.com/gin-gonic/gin@v1.10.0/context.go:185 (0xba758a)
k8s.io/dashboard/csrf@v0.0.0-00010101000000-000000000000/middleware_gin.go:86 (0xbd0144)
github.com/gin-gonic/gin@v1.10.0/context.go:185 (0xbb486e)
github.com/gin-gonic/gin@v1.10.0/recovery.go:102 (0xbb485b)
github.com/gin-gonic/gin@v1.10.0/context.go:185 (0xbb3611)
github.com/gin-gonic/gin@v1.10.0/gin.go:633 (0xbb3080)
github.com/gin-gonic/gin@v1.10.0/gin.go:589 (0xbb2bb1)
net/http/server.go:3210 (0x863bcd)
net/http/server.go:2092 (0x8431cf)
runtime/asm_amd64.s:1700 (0x476f40)
```
But weirdly enough, I am authenticated. If I just navigate to https://localhost:8443 manually I'm good, although all subsequent requests to /api/v1/me continue to return 500's.
<img width="1686" height="1126" alt="Image" src="https://github.com/user-attachments/assets/2f3a99bd-cb94-4b4d-9560-a3b4ffbeef1d" />
### What did you expect to happen?
No errors.
### How can we reproduce it (as minimally and precisely as possible)?
See above.
### Anything else we need to know?
_No response_
### What browsers are you seeing the problem on?
_No response_
### Kubernetes Dashboard version
7.13.0
### Kubernetes version
$ k version Client Version: v1.33.1 Kustomize Version: v5.6.0 Server Version: v1.33.5-gke.1125000
### Dev environment
_No response_
1 条评论