This error occurs when Kubernetes API server rejects a request due to an invalid, expired, or malformed JWT authentication token, affecting API access and service account authentication.
Fixes JWT token invalid
# JWT token invalidJWT token invalid
The "JWT token invalid" error indicates that the JWT presented for authentication is invalid, expired, or cannot be verified.
kubectl exec -it <pod> -- cat /var/run/secrets/kubernetes.io/serviceaccount/token
kubectl delete secret <sa-name>-token-xxx -n <namespace>
kubectl logs -n kube-system pod/kube-apiserver-<node> | grep -i key
kubectl get pods -n kube-system -o yaml | grep -i oidc
kubectl logs -n kube-system pod/kube-apiserver-<node> | grep -i token
Token lifespan: 1.24+ tokens no longer expire by default. Use Service Account Volume Projection for short-lived tokens.