Fix handling of kubeadm bootstrap token without expiration

enix · Dec 6, 2024 · 60752bc · 60752bc
1 parent 6b5401e
commit 60752bc
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/plugins/filter/bootstrap_token.py b/plugins/filter/bootstrap_token.py
@@ -31,11 +31,14 @@ def _token_filter(self, token_list, now=None):
         else:
             threshold = arrow.utcnow()
         for token in token_list:
-            if (
-                arrow.get(base64.b64decode(token["data"]["expiration"]).decode("utf-8"))
-                >= threshold
-            ):
-                yield token
+            try:
+                if (
+                    arrow.get(base64.b64decode(token["data"]["expiration"]).decode("utf-8"))
+                    >= threshold
+                ):
+                    yield token
+            except KeyError:
+                continue
 
 
 if __name__ == "__main__":