Can the Kubeconfig Token Validity be modified?

Problem

The token provided in the kubeconfig is valid only for 24 hours and is there a way to modify it?

Environment

• Platform9 Managed Kubernetes - All versions

Answer

The token provided in the kubeconfig is valid for 24 hours regardless of local or SSO user. The kubeconfig tokens are provided through keystone and the current expiration time is set to 24 hours in the configuration. Drastically increasing the expiration value will increase the load on the token driver, as more tokens will be simultaneously valid. Keystone tokens are also bearer tokens, so a shorter duration will also reduce the potential security impact of a compromised token.