Azure-docs: How long the token is valid for

[guibirow]

In the docs it says Once you are successfully signed in, the account token is cached for future kubectl commands
But does not mention how long the token is valid for.
How would we use it into an automated pipeline? Can we use the same token?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 84495e76-eca6-ddc9-989f-01c844aaa29d
• Version Independent ID: de2a46f6-59c7-f4bd-c409-ea8d04741a6d
• Content: Control cluster resources with RBAC and Azure AD in Azure Kubernetes Service
• Content Source: articles/aks/azure-ad-rbac.md
• Service: container-service
• GitHub Login: @mlearned
• Microsoft Alias: mlearned

[mimckitt]

Thanks for the question! We are investigating and will update you shortly.

[VikasPullagura-MSFT]

@guibirow I will have the relevant team add comments on the token cached validity.

[VikasPullagura-MSFT]

@MicrosoftDocs/aks-pm Please add your comments on the cached token validity.

[Tenseiga]

following

[VikasPullagura-MSFT]

@MicrosoftDocs/aks-pm can you please look into this and confirm on the token validity.

[palma21]

Depends on if this is AAD enabled cluster or not. AAD tokens have the AAD-defined validity (which can also be controlled)
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes

For pipelines we normally recommend Service Accounts and SA tokens.

[Karishma-Tiwari-MSFT]

@guibirow Hope the comment above helped answer your question.
We will now close this issue. If there are further questions regarding this matter, please tag me in a comment. I will reopen it and we will gladly continue the discussion.