danielfoehrKn/kubeswitch

Rancher: Create expiring tokens

reg0bs opened this issue · 0 comments

reg0bs commented

It seems when using switch with Rancher that the scoped tokens that get created don't have an expiry date. It would be a nice security property to have switch create token with let's say a day of validity since it can create new ones with the bearer token anyway.

This way one could create a bearer token that lasts for a month or a year and protect that one especially and at the same time have kind of temporary credentials be created and used by switch that, if compromised, expire very fast by themself.

I'm curious what other might think about that proposal.

PS: Thanks for the awesome tool, it makes my daily work so much easier! 🙇