Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

kubectl exec session with ELB not respecting keep-alives and session not in UI #3765

Closed
jon-can opened this issue May 26, 2020 · 3 comments · Fixed by #4377
Closed

kubectl exec session with ELB not respecting keep-alives and session not in UI #3765

jon-can opened this issue May 26, 2020 · 3 comments · Fixed by #4377
Assignees
Labels
sales-onboarding Issues related to prospects
Milestone

Comments

@jon-can
Copy link
Contributor

jon-can commented May 26, 2020

Description

What happened:
ELBs have an idle timeout: https://aws.amazon.com/blogs/aws/elb-idle-timeout-control/
This issue addresses that: #2334
However those configuration options seem to only apply to SSH sessions. If someone is kubectl exec’ing through an ELB the kubectl exec session will end depending on what the idle timeout is set to. If the kubectl exec session ends due to the timeout then there is not a recording that appears in the UI.

What you expected to happen:
kubectl exec session should not end and the session should be recorded and appear in the UI

How to reproduce it (as minimally and precisely as possible):
Used this Helm Chart with an AWS ELB:
https://github.com/gravitational/teleport/tree/master/examples/chart/teleport

AWS ELB has an idle timeout so keep_alive_interval is set to a value less than the idle timeout.

Environment

image:
repository: quay.io/gravitational/teleport-ent
tag: 4.2.8

┆Issue is synchronized with this Asana task by Unito

@jon-can jon-can added the sales-onboarding Issues related to prospects label May 26, 2020
@jon-can jon-can added the R2 label May 28, 2020
@russjones russjones added this to the 4.4 "Rome" milestone Jun 8, 2020
@russjones
Copy link
Contributor

Best: 3
Worst: 5

@awly
Copy link
Contributor

awly commented Aug 21, 2020

Sent kubernetes/kubernetes#94170 with an upstream change needed for this.
If it's not merged before 4.4 approaches, I'll make a temporary fork with the patch for us to use.

@awly
Copy link
Contributor

awly commented Sep 23, 2020

kubernetes/kubernetes#94170 has been merged.
Now we can just bump our vendored version and enable the SPDY pings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
sales-onboarding Issues related to prospects
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants