Bug 1741957
Summary: | [ci] [azure] e2e failing on a variety of OAuth tests | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Yu Qi Zhang <jerzhang> |
Component: | Networking | Assignee: | Dan Mace <dmace> |
Networking sub component: | DNS | QA Contact: | Hongan Li <hongli> |
Status: | CLOSED DUPLICATE | Docs Contact: | |
Severity: | high | ||
Priority: | high | CC: | adahiya, aos-bugs, bbennett, dmace, mfojtik, xxia |
Version: | 4.2.0 | ||
Target Milestone: | --- | ||
Target Release: | 4.2.0 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2019-08-20 16:34:02 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Yu Qi Zhang
2019-08-16 14:16:00 UTC
This looks like DNS problem: dial tcp: lookup oauth-openshift.apps.ci-op-btyv29s0-282fe.ci.azure.devcluster.openshift.com on 10.142.15.218:53: no such host From the ingress-operator pod logs. ``` [{"type":"Failed","status":"True","lastTransitionTime":"2019-08-19T19:58:47Z","reason":"ProviderError","message":"The DNS provider failed to ensure the record: failed to update dns a record: *.apps.ci-op-5idr0d56-282fe.ci.azure.devcluster.openshift.com: dns.RecordSetsClient#CreateOrUpdate: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code=\"AuthorizationFailed\" Message=\"The client '9988be96-f7f4-4cc1-9d0c-a4f477e51ca1' with object id '9988be96-f7f4-4cc1-9d0c-a4f477e51ca1' does not have authorization to perform action 'Microsoft.Network/dnsZones/A/write' over scope '/subscriptions/d38f1e38-4bed-438e-b227-833f997adf6a/resourceGroups/os4-common/providers/Microsoft.Network/dnsZones/ci.azure.devcluster.openshift.com/A/*.apps.ci-op-5idr0d56-282fe' or the scope is invalid. If access was recently granted, please refresh your credentials.\""}]}]}}} ``` As this looks like a DNS issue (which breaks oauth), reassigning. *** This bug has been marked as a duplicate of bug 1743728 *** |