Token Monitoring

[blinkdog]

Services use the Token Service to authenticate with one another.

For example, the Picker component of LTA needs to authenticate with the LTA REST server (the LTA DB) and the File Catalog.

A service token is generated manually and provided to the service via a Secret in Kubernetes.

The token is expected to be long-lived, but this means it should also be monitored. The monitoring system should be informing the operators: "Hey, this token you gave me for X is about to expire in Y days. Please give me a new one!"

This issue is to implement this functionality in LTA. One possible implementation could be a modification to the REST client to check and report the length of token validity to Prometheus.