ITADN

authenticating with a google cloud access token fails successfully (500 OK)

#10378Openrsalmond 创建于 2025-10-06
kind/buglifecycle/stale
R
rsalmondcommented
### What happened? ``` helm install my-kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --version 7.13.0 kubectl -n default port-forward svc/my-kubernetes-dashboard-kong-proxy 8443:443 gcloud config config-helper --format=json | jq .credential.access_token -r | pbcopy ``` <img width="1481" height="1124" alt="Image" src="https://github.com/user-attachments/assets/4bb65d87-84e6-4a6f-9085-9c10a9aa89fd" /> ```console $ kubectl logs -l app.kubernetes.io/name=kubernetes-dashboard-auth -f I1006 18:18:59.162780 1 main.go:34] "Starting Kubernetes Dashboard Auth" version="1.3.0" I1006 18:18:59.162889 1 init.go:48] Using in-cluster config I1006 18:18:59.163178 1 main.go:43] "Listening and serving insecurely on" address="0.0.0.0:8000" E1006 18:19:12.210143 1 handler.go:33] "Could not get user" err="MSG_LOGIN_UNAUTHORIZED_ERROR" I1006 18:20:25.364739 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1006 18:20:25.364776 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1006 18:20:25.364785 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1006 18:20:25.364792 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false 2025/10/06 18:20:25 [Recovery] 2025/10/06 - 18:20:25 panic recovered: interface conversion: jwt.Claims is nil, not jwt.MapClaims runtime/iface.go:275 (0x40df30) runtime/iface.go:285 (0x40dee9) k8s.io/dashboard/auth/pkg/routes/me/me.go:60 (0x1a5c7f6) k8s.io/dashboard/auth/pkg/routes/me/me.go:51 (0x1a5c649) k8s.io/dashboard/auth/pkg/routes/me/handler.go:31 (0x1a5c4ad) github.com/gin-gonic/gin@v1.10.0/context.go:185 (0xba758a) k8s.io/dashboard/csrf@v0.0.0-00010101000000-000000000000/middleware_gin.go:86 (0xbd0144) github.com/gin-gonic/gin@v1.10.0/context.go:185 (0xbb486e) github.com/gin-gonic/gin@v1.10.0/recovery.go:102 (0xbb485b) github.com/gin-gonic/gin@v1.10.0/context.go:185 (0xbb3611) github.com/gin-gonic/gin@v1.10.0/gin.go:633 (0xbb3080) github.com/gin-gonic/gin@v1.10.0/gin.go:589 (0xbb2bb1) net/http/server.go:3210 (0x863bcd) net/http/server.go:2092 (0x8431cf) runtime/asm_amd64.s:1700 (0x476f40) ``` But weirdly enough, I am authenticated. If I just navigate to https://localhost:8443 manually I'm good, although all subsequent requests to /api/v1/me continue to return 500's. <img width="1686" height="1126" alt="Image" src="https://github.com/user-attachments/assets/2f3a99bd-cb94-4b4d-9560-a3b4ffbeef1d" /> ### What did you expect to happen? No errors. ### How can we reproduce it (as minimally and precisely as possible)? See above. ### Anything else we need to know? _No response_ ### What browsers are you seeing the problem on? _No response_ ### Kubernetes Dashboard version 7.13.0 ### Kubernetes version $ k version Client Version: v1.33.1 Kustomize Version: v5.6.0 Server Version: v1.33.5-gke.1125000 ### Dev environment _No response_
1 条评论