authenticating with a google cloud access token fails successfully (500 OK) #10378
Description
What happened?
helm install my-kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --version 7.13.0
kubectl -n default port-forward svc/my-kubernetes-dashboard-kong-proxy 8443:443
gcloud config config-helper --format=json | jq .credential.access_token -r | pbcopy
$ kubectl logs -l app.kubernetes.io/name=kubernetes-dashboard-auth -f
I1006 18:18:59.162780 1 main.go:34] "Starting Kubernetes Dashboard Auth" version="1.3.0"
I1006 18:18:59.162889 1 init.go:48] Using in-cluster config
I1006 18:18:59.163178 1 main.go:43] "Listening and serving insecurely on" address="0.0.0.0:8000"
E1006 18:19:12.210143 1 handler.go:33] "Could not get user" err="MSG_LOGIN_UNAUTHORIZED_ERROR"
I1006 18:20:25.364739 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I1006 18:20:25.364776 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I1006 18:20:25.364785 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I1006 18:20:25.364792 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
2025/10/06 18:20:25 [Recovery] 2025/10/06 - 18:20:25 panic recovered:
interface conversion: jwt.Claims is nil, not jwt.MapClaims
runtime/iface.go:275 (0x40df30)
runtime/iface.go:285 (0x40dee9)
k8s.io/dashboard/auth/pkg/routes/me/me.go:60 (0x1a5c7f6)
k8s.io/dashboard/auth/pkg/routes/me/me.go:51 (0x1a5c649)
k8s.io/dashboard/auth/pkg/routes/me/handler.go:31 (0x1a5c4ad)
github.com/gin-gonic/[email protected]/context.go:185 (0xba758a)
k8s.io/dashboard/[email protected]/middleware_gin.go:86 (0xbd0144)
github.com/gin-gonic/[email protected]/context.go:185 (0xbb486e)
github.com/gin-gonic/[email protected]/recovery.go:102 (0xbb485b)
github.com/gin-gonic/[email protected]/context.go:185 (0xbb3611)
github.com/gin-gonic/[email protected]/gin.go:633 (0xbb3080)
github.com/gin-gonic/[email protected]/gin.go:589 (0xbb2bb1)
net/http/server.go:3210 (0x863bcd)
net/http/server.go:2092 (0x8431cf)
runtime/asm_amd64.s:1700 (0x476f40)But weirdly enough, I am authenticated. If I just navigate to https://localhost:8443 manually I'm good, although all subsequent requests to /api/v1/me continue to return 500's.
What did you expect to happen?
No errors.
How can we reproduce it (as minimally and precisely as possible)?
See above.
Anything else we need to know?
No response
What browsers are you seeing the problem on?
No response
Kubernetes Dashboard version
7.13.0
Kubernetes version
$ k version Client Version: v1.33.1 Kustomize Version: v5.6.0 Server Version: v1.33.5-gke.1125000
Dev environment
No response