diff --git a/manifests/alaska/k8s-dashboard.yaml b/manifests/alaska/k8s-dashboard.yaml
index 3de5b97..7b6bca0 100644
--- a/manifests/alaska/k8s-dashboard.yaml
+++ b/manifests/alaska/k8s-dashboard.yaml
@@ -62,13 +62,12 @@ spec:
         args:
           - --auto-generate-certificates
           - --namespace=kubernetes-dashboard
-          # Disables the default 15-minute idle session timeout, so a
-          # logged-in session persists instead of dropping back to the
-          # token screen. The service account token itself already
-          # doesn't expire (it's a Secret-backed legacy token, not a
-          # short-lived TokenRequest one) - this was purely the
-          # dashboard's own session cache.
-          - --token-ttl=0
+          # --token-ttl=0 was tried here to disable the 15-min idle
+          # timeout, but login broke immediately after that pod came up -
+          # in this dashboard version, 0 appears to mean "expire
+          # immediately" rather than "never expire". Reverted; back to
+          # the default 900s timeout until a properly-tested value (e.g.
+          # a long finite number of seconds) is confirmed safe.
         volumeMounts:
         - name: kubernetes-dashboard-certs
           mountPath: /certs