Bug 1883196

Summary:	kube-apiserver: silence own loopback requests before /readyz success
Product:	OpenShift Container Platform	Reporter:	Stefan Schimanski <sttts>
Component:	kube-apiserver	Assignee:	Stefan Schimanski <sttts>
Status:	CLOSED ERRATA	QA Contact:	Ke Wang <kewang>
Severity:	high	Docs Contact:
Priority:	high
Version:	4.6	CC:	aos-bugs, mfojtik, xxia
Target Milestone:	---
Target Release:	4.6.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-10-27 16:45:44 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Stefan Schimanski 2020-09-28 11:54:20 UTC

We see these for request from kube-apiserver to itself before it is ready. They are confusing for the user and noise in debugging:

  Loopback request to %q (user agent %q) before server is ready. This client probably does not watch /readyz and might get inconsistent answers.

Comment 2 Ke Wang 2020-09-30 11:05:15 UTC

Without fix build,
$ oc get clusterversion
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.6.0-0.nightly-2020-09-28-212756   True        False         27h     Cluster version is 4.6.0-0.nightly-2020-09-28-212756

$ oc logs -n openshift-kube-apiserver kube-apiserver-ip-10-0-145-89.us-east-2.compute.internal -c kube-apiserver | grep 'user agent "kube-apiserver' | wc -l
205

Verified with loaded fix build,
$ oc get clusterversion
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.6.0-0.nightly-2020-09-29-170625   True        False         3h48m   Cluster version is 4.6.0-0.nightly-2020-09-29-170625

$ oc logs -n openshift-kube-apiserver kube-apiserver-ip-10-0-157-18.us-east-2.compute.internal -c kube-apiserver | grep 'user agent "kube-apiserver' | wc -l
0

We can see there is no Loopback request from user agent "kube-apiserver" logged as expected, so move the bug verified.

Comment 5 errata-xmlrpc 2020-10-27 16:45:44 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6 GA Images), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4196