mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-07-10 00:51:09 +00:00
Review follow-up. HubTokenRenewer.Token() re-minted on every request while the token was empty, so a cluster where minting can't succeed (no RBAC, SA missing) paid a blocking ~10s CreateToken round-trip per request (under the lock). Add a 30s retry throttle: on mint failure, back off and fall back to the prior token / License-Key. Also correct the proxy-mode 401 message — a token-bearing 401 means the minted token was rejected (allowlist/audience), not an RBAC-to-mint failure.