Skip to content

Commit 45b7eef

Browse files
added access token expiry and refresh token expiry (#4230)
* added access token expiry and refresh token expiry Modified access-token-expiry (1440 minutes) and refresh-token-expiry (10080 minutes) in the flag section and added them to the General Configuration. * updated sensu-docs As per review comments updated docs * Added the 16.13.1 release notes to the Sensu documentation and deleted the Tessen reference tab. Added the 16.13.1 release notes to the Sensu documentation and deleted the Tessen reference tab.
1 parent b7810ad commit 45b7eef

File tree

3 files changed

+57
-260
lines changed

3 files changed

+57
-260
lines changed

content/sensu-go/6.13/observability-pipeline/observe-schedule/backend.md

Lines changed: 29 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -332,7 +332,7 @@ Usage:
332332
sensu-backend start [flags]
333333

334334
General Flags:
335-
--access-token-expiry Control expiry of access token
335+
--access-token-expiry Control expiry of access token (The duration must be specified in minutes, e.g.,access-token-expiry: 1440m)
336336
--agent-auth-cert-file string TLS certificate in PEM format for agent certificate authentication
337337
--agent-auth-crl-urls strings URLs of CRLs for agent certificate authentication
338338
--agent-auth-key-file string TLS certificate key in PEM format for agent certificate authentication
@@ -386,7 +386,7 @@ General Flags:
386386
--pipelined-workers int number of workers spawned for handling events through the event pipeline (default 100)
387387
--platform-metrics-log-file string platform metrics log file path
388388
--platform-metrics-logging-interval string platform metrics logging interval
389-
--refresh-token-expiry Control expiry of refresh token
389+
--refresh-token-expiry Control expiry of refresh token (The duration must be specified in minutes, e.g., refresh-token-expiry: 10080m)
390390
--require-fips indicates whether fips support should be required in openssl
391391
--trusted-ca-file string TLS CA certificate bundle in PEM format
392392

@@ -446,6 +446,20 @@ annotations:
446446
sensu.io/plugins/slack/config/webhook-url: "https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX"
447447
{{< /code >}}
448448

449+
| access-token-expiry | |
450+
|---------------------|-----|
451+
| description | Control expiry of access token. The duration must be specified in minutes. |
452+
| type | String |
453+
| default | 1440m |
454+
| environment variable | SENSU_BACKEND_ACCESS_TOKEN_EXPIRY |
455+
| command line example | {{< code shell >}}
456+
sensu-backend start --access-token-expiry 1440m
457+
{{< /code >}} |
458+
| backend.yml config file example | {{< code shell >}}
459+
access-token-expiry: 1440m
460+
{{< /code >}} |
461+
462+
449463
| api-listen-address | |
450464
-------------|------
451465
description | Address the API daemon will listen for requests on.
@@ -670,6 +684,19 @@ metrics-refresh-interval: 10s{{< /code >}}
670684

671685
<a id="state-dir-option"></a>
672686

687+
| refresh-token-expiry | |
688+
|----------------------|-----|
689+
| description | Control expiry of refresh token. The duration must be specified in minutes. |
690+
| type | String |
691+
| default | 10080m |
692+
| environment variable | SENSU_BACKEND_REFRESH_TOKEN_EXPIRY |
693+
| command line example | {{< code shell >}}
694+
sensu-backend start --refresh-token-expiry 10080m
695+
{{< /code >}} |
696+
| backend.yml config file example | {{< code shell >}}
697+
refresh-token-expiry: 10080m
698+
{{< /code >}} |
699+
673700
| state-dir | |
674701
-------------|------
675702
description | Path to Sensu state storage: `/var/lib/sensu/sensu-backend`.

content/sensu-go/6.13/operations/monitor-sensu/tessen.md

Lines changed: 0 additions & 258 deletions
This file was deleted.

content/sensu-go/6.13/release-notes.md

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ version: "6.13"
99
menu: "sensu-go-6.13"
1010
---
1111

12+
- [6.13.1 release notes](#6130-release-notes)
1213
- [6.13.0 release notes](#6130-release-notes)
1314
- [6.12.0 release notes](#6120-release-notes)
1415
- [6.11.0 release notes](#6110-release-notes)
@@ -118,6 +119,33 @@ Read the [upgrade guide][1] for information about upgrading to the latest versio
118119

119120
---
120121

122+
## 6.13.1 — October 29, 2025
123+
The latest release of Sensu Go, version 6.13.1, is now available for download.
124+
Read the [upgrade guide][1] to upgrade Sensu to version 6.13.1.
125+
126+
### New Features
127+
- Added `access-token-expiry` backend configuration variable to control expiry of access tokens.
128+
*(The duration must be specified in minutes, e.g., `access-token-expiry: 1440m`)*
129+
- Added `refresh-token-expiry` backend configuration variable to control expiry of refresh tokens.
130+
*(The duration must be specified in minutes, e.g., `refresh-token-expiry: 10080m`)*
131+
132+
### Improvements
133+
- Introduced fine-grained token expiry control via new backend configuration options.
134+
- Enhanced backend configurability to support environments requiring custom session lifetimes.
135+
136+
### Fixes
137+
- Minor improvements and optimizations applied to backend configuration handling.
138+
- **Silence Creation Issues**: Fixed a bug where users were unable to create silences via the `curl` command when `max-silenced-expiry-time-allowed` and `default-silenced-expiry-time` flags were not set in `backend.yml`. These flags are now optional, allowing silences to be created via Web UI, `sensuctl`, and API without requiring these fields.
139+
- **UID Mapping Issues in Docker (RedHat and Alpine)**: Resolved a compatibility issue where Sensu Docker containers failed to run on systems using cgroupsv2, due to a file (`etcdctl`) having a UID exceeding the 65535 limit. All UIDs are now within the allowed range to support UID remapping and avoid container runtime errors.
140+
- **OIDC Integration Improvements for Microsoft Entra ID**: Resolved an issue where users were prompted for approval on every login when using Microsoft Entra ID as the OIDC provider. The login experience is now smoother, with Entra ID respecting previously granted permissions and reducing unnecessary approval prompts.
141+
142+
### Removals
143+
- **Removed Tessen Telemetry Service**:
144+
The Tessen functionality has been removed from Sensu Go. Tessen previously collected and transmitted anonymized usage data to Sensu for product insights. Since the backend infrastructure supporting telemetry collection is no longer available, Tessen has been fully deprecated and removed from this release.
145+
Documentation related to Tessen has been updated or removed accordingly.
146+
147+
---
148+
121149
## 6.13.0 release notes
122150

123151
**April 10, 2025** &mdash; The latest release of Sensu Go, version 6.13.0, is now available for download.

0 commit comments

Comments
 (0)