login-sync needs to issue tokens from logincluster
Login sync issues tokens created by the local cluster.
As a short term solution, add feature for providing alternate host/token for the login cluster, so we issue tokens from
the login cluster instead.
In other words, get the virtual machine list from the local cluster, but issue tokens from the login cluster.
The environment variables are LOGINCLUSTER_ARVADOS_API_HOST and LOGINCLUSTER_ARVADOS_API_TOKEN.
The longer term solution is to make the token management API more federation aware.
#3 Updated by Peter Amstutz 4 months ago
#9 Updated by Peter Amstutz 3 months ago
Lucas Di Pentima wrote:
AFAICT the envvars
LOGINCLUSTER_ARVADOS_API_TOKENare new and not mentioned anywhere. Do you think it would be necessary to write some documentation about them?
Added to shell server install doc.
17224-login-sync @ a622b6980539db9563b6a92e0996197b61dae862