# JWT Credential Causes Kong To Die

**URL:** <https://discuss.konghq.com/t/jwt-credential-causes-kong-to-die/2271>\
**Category:** General\
**Created:** [November 13, 2018, 9:40pm UTC](https://discuss.konghq.com/t/jwt-credential-causes-kong-to-die/2271 "2018-11-13T21:40:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![James\_Young](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/james_young/32/2700_2.png) [@James\_Young](https://discuss.konghq.com/u/James_Young)\
**Post date:** [November 13, 2018, 9:40pm UTC](https://discuss.konghq.com/t/jwt-credential-causes-kong-to-die/2271/1 "2018-11-13T21:40:03Z")

</div>

Hi There,

I am adding a consumer + jwt plugin + credential:

```
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
   name: user-gunicorn
spec:
   replicas: 3
   selector:
      matchLabels:
         app: user-gunicorn
   template:
      metadata:
         labels:
            app: user-gunicorn
      spec:
         containers:
            - name: user-gunicorn
              image: docker.weightrack.io/user-gunicorn
              env:
              - name: GUNICORN_WORKERS
                value: "5"

---

apiVersion: v1
kind: Service
metadata:
  name: user-gunicorn
  labels:
     app: user-gunicorn
spec:
  ports:
  - port: 80
    targetPort: 80
    protocol: TCP
    name: user-gunicorn-http
  selector:
    app: user-gunicorn

---

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
   name: api.weightrack.io-user-gunicorn
   annotations:
     plugins.konghq.com: user-kong-cors
     plugins.konghq.com: user-kong-jwt
spec:
   rules:
     - host: api.weightrack.io
       http:
         paths:
           - path: /user
             backend:
               serviceName: user-gunicorn
               servicePort: 80

---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
   name: api.weightrack.io-user-gunicorn-register
   annotations:
     plugins.konghq.com: user-kong-cors
spec:
   rules:
     - host: api.weightrack.io
       http:
         paths:
           - path: /user/register
             backend:
               serviceName: user-gunicorn
               servicePort: 80

---

apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: user-kong-cors
  namespace: default
plugin: cors
config:
  origins: "*"
  methods:
      - GET
      - HEAD
      - PUT
      - PATCH
      - POST
  headers:
      - "Origin"
      - "Access-Control-Request-Headers"
      - "Access-Control-Allow-Origin"
  exposed_headers:
      - "Origin"
      - "Access-Control-Request-Headers"
      - "Access-Control-Allow-Origin"
  preflight_continue: "true"
  credentials: "true"

---

apiVersion: configuration.konghq.com/v1
kind: KongConsumer
metadata:
  name: user-kong-consumer
  namespace: default
username: jwt_consumer
custom_id: jwt_consumer

---

apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: user-kong-jwt
  namespace: default
plugin: jwt
config:
  claims_to_verify: "exp"

---

apiVersion: configuration.konghq.com/v1
kind: KongCredential
metadata:
name: jwt-credential
consumerRef: user-kong-consumer
type: jwt

```

When I apply this, it does not create a jwt credential and actually causes my kong ingress pod to stop working to the point where I have to redeploy it.

When I status kubelet, I get a message saying there was an error syncing the pod.

Is my JWT Plugin configuration correct? What else might explain this behavior?

Thanks for your help!

---

<div class="post-metadata">

**Author:** ![arvtiwar](https://avatars.discourse-cdn.com/v4/letter/a/3da27b/32.png) [@arvtiwar](https://discuss.konghq.com/u/arvtiwar)\
**Post date:** [December 13, 2019, 10:05pm UTC](https://discuss.konghq.com/t/jwt-credential-causes-kong-to-die/2271/2 "2019-12-13T22:05:28Z")

</div>

Did your CORS setting work?

---

<div class="post-metadata">

**Author:** ![HYUN\_SUK\_JUNG](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/hyun_suk_jung/32/1122_2.png) [@HYUN\_SUK\_JUNG](https://discuss.konghq.com/u/HYUN_SUK_JUNG)\
**Post date:** [December 16, 2019, 12:08am UTC](https://discuss.konghq.com/t/jwt-credential-causes-kong-to-die/2271/3 "2019-12-16T00:08:21Z")

</div>

Have you tried to separate the list with a comma?

[plugins.konghq.com](http://plugins.konghq.com): user-kong-cors,user-kong-jwt