-
Notifications
You must be signed in to change notification settings - Fork 458
Open
Labels
feature requestFeature request: request to add new features or functionalityFeature request: request to add new features or functionalityp2P2P2
Description
Describe the issue
For security purposes, our application default credentials are set to expire every 16 hrs (in local dev environments). When a developer refreshes their credentials, GCS fuse doesn't seem to reload the credential file, and continues to get invalid_grant
errors since it is using the old, expired credentials. This requires the additional step of restarting GCSFuse — not the end of the world, but an extra layer of complexity that would ideally be handled by fuse.
To Collect more Debug logs
Steps to reproduce the behavior:
- Create application default creations:
gcloud auth application-default login
- Start GCS fuse, which will use these credentials
- Revoke / expire the credentials. GCS fuse will start logging errors.
- Refresh the credentials:
gcloud auth application-default login
- Within a reasonable period of time, we would expect fuse to reload the credentials file and start working again, but it currently doesn't.
System (please complete the following information):
- OS: Debian 11 (bullseye)
- Platform: local kubernetes
- Version: 1.4.0
Coec0
Metadata
Metadata
Assignees
Labels
feature requestFeature request: request to add new features or functionalityFeature request: request to add new features or functionalityp2P2P2