# Constant session timeouts in Kibana 7.10.0 on OpenShift but not with 7.9.3

**URL:** <https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000>\
**Category:** Kibana\
**Created:** [November 19, 2020, 2:23pm UTC](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000 "2020-11-19T14:23:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ngilmore](https://avatars.discourse-cdn.com/v4/letter/n/2bfe46/32.png) [@ngilmore](https://discuss.elastic.co/u/ngilmore)\
**Post date:** [November 19, 2020, 2:23pm UTC](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000/1 "2020-11-19T14:23:48Z")

</div>

I have installed a secured Elastic 7.10.0 cluster (3 master, 2 client, 5 data nodes) on OpenShift and added Kibana (2 node cluster).

However, with Kibana 7.10.0 installed it constantly experiences session timeouts.

I have set every configuration setting I could find to stop this from happening:

```auto
kibana.yml: |-
    server.host: 0.0.0.0
    xpack.security.session.idleTimeout: 900000 # timeout after 15 min idle
    xpack.security.session.lifespan: "30d"
    xpack.security.sessionTimeout: 86400000 # session lasts 24 hours
    xpack.security.encryptionKey: "REDACTED"
    elasticsearch:
      hosts: ${ELASTICSEARCH_HOSTS}
      username: ${ELASTICSEARCH_USERNAME}
      password: ${ELASTICSEARCH_PASSWORD}
      pingTimeout: 600000
      requestTimeout: 600000
      shardTimeout: 600000
      startupTimeout: 600000

```

In OpenShift, I adjusted the route:

```auto
oc annotate route <<route-name>> --overwrite haproxy.router.openshift.io/timeout=86400000

```

However, it still timeouts out the session immediately using 7.10.0 but works find with 7.9.3

Any idea why this is happening?

---

<div class="post-metadata">

**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\
**Post date:** [November 19, 2020, 8:41pm UTC](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000/2 "2020-11-19T20:41:57Z")

</div>

Hey @ngilmore, welcome to the discussion boards!

`xpack.security.sessionTimeout` has been renamed to `xpack.security.session.idleTimeout`, so it's not necessary to configure both. I'd recommend just keeping `xpack.security.session.idleTimeout`. You can also make that setting more readable by specifying it as a duration like you've done for the lifespan:

```auto
xpack.security.session.idleTimeout: 15m # timeout after 15 minutes of inactivity 

```

* * *

None of that is the cause of your problem though. Can you double check that you have `xpack.security.encryptionKey` set on BOTH of your Kibana instances, and that this value is identical? Having different encryption keys set on different instances is a common cause of this problem.

If that's already configured properly, then we will need debug logs to triage further. Set the following, restart Kibana, and capture the logs which show the session timeouts happening:

```auto
# kibana.yml
logging.verbose: true

```

---

<div class="post-metadata">

**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\
**Post date:** [November 20, 2020, 6:52am UTC](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000/3 "2020-11-20T06:52:30Z")

</div>

> [@Larry\_Gregory](#):
>
> Can you double check that you have `xpack.security.encryptionKey` set on BOTH of your Kibana instances, and that this value is identical? Having different encryption keys set on different instances is a common cause of this problem.

In addition to what Larry said, make sure that ALL session related settings (`xpack.security.session.*`) are identical for all Kibana instances you have.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 18, 2020, 6:52am UTC](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000/4 "2020-12-18T06:52:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.