Summary: | p&f: probes should not get 429s | |||
---|---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Abu Kashem <akashem> | |
Component: | kube-apiserver | Assignee: | Abu Kashem <akashem> | |
Status: | CLOSED ERRATA | QA Contact: | Ke Wang <kewang> | |
Severity: | high | Docs Contact: | ||
Priority: | medium | |||
Version: | 4.7 | CC: | akashem, aos-bugs, deads, kewang, mfojtik, skuznets, xxia | |
Target Milestone: | --- | Flags: | mfojtik:
needinfo?
|
|
Target Release: | 4.6.z | |||
Hardware: | Unspecified | |||
OS: | Unspecified | |||
Whiteboard: | LifecycleReset | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | ||
Doc Text: | Story Points: | --- | ||
Clone Of: | 1939537 | |||
: | 1939542 (view as bug list) | Environment: | ||
Last Closed: | 2021-12-15 20:01:34 UTC | Type: | --- | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Bug Depends On: | 1939537 | |||
Bug Blocks: | 1939542 |
Description
Abu Kashem
2021-03-16 15:19:36 UTC
This bug hasn't had any activity in the last 30 days. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet. As such, we're marking this bug as "LifecycleStale" and decreasing the severity/priority. If you have further information on the current state of the bug, please update it, otherwise this bug can be closed in about 7 days. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant. Additionally, you can add LifecycleFrozen into Keywords if you think this bug should never be marked as stale. Please consult with bug assignee before you do that. Launched one 4.6 cluster with the PR of the bug by cluster-bot, $ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.6.0-0.ci.test-2021-11-17-023305-ci-ln-yf1l152-latest True False 10m Cluster version is 4.6.0-0.ci.test-2021-11-17-023305-ci-ln-yf1l152-latest $ oc get flowschema | grep probe probes exempt 2 <none> 54m False $ oc edit kubeapiserver/cluster # change the loglevel to TraceAll kubeapiserver.operator.openshift.io/cluster edited After the kube-apiservers fnished the restarting, make some readyz requests to the apiserver, $ for i in {1..30}; do curl -k https://api.ci-ln...rhcloud.com:6443/readyz;done $ kas_pods=$(oc get pods -n openshift-kube-apiserver | grep 'kube-apiserver' | awk '{print $1}'); for pod in $kas_pods; do oc -n openshift-kube-apiserver logs $pod -c kube-apiserver | grep 'exempt' | grep 'readyz' | head -1;done I1117 04:00:16.175732 17 apf_controller.go:678] startRequest(RequestDigest{RequestInfo: &request.RequestInfo{IsResourceRequest:false, Path:"/readyz", Verb:"get", APIPrefix:"", APIGroup:"", APIVersion:"", Namespace:"", Resource:"", Subresource:"", Name:"", Parts:[]string(nil)}, User: &user.DefaultInfo{Name:"system:anonymous", UID:"", Groups:[]string{"system:unauthenticated"}, Extra:map[string][]string(nil)}}) => fsName="probes", distMethod=(*v1alpha1.FlowDistinguisherMethod)(nil), plName="exempt", immediate I1117 03:59:54.374974 18 apf_controller.go:678] startRequest(RequestDigest{RequestInfo: &request.RequestInfo{IsResourceRequest:false, Path:"/readyz", Verb:"get", APIPrefix:"", APIGroup:"", APIVersion:"", Namespace:"", Resource:"", Subresource:"", Name:"", Parts:[]string(nil)}, User: &user.DefaultInfo{Name:"system:anonymous", UID:"", Groups:[]string{"system:unauthenticated"}, Extra:map[string][]string(nil)}}) => fsName="probes", distMethod=(*v1alpha1.FlowDistinguisherMethod)(nil), plName="exempt", immediate I1117 03:58:19.136716 16 apf_controller.go:678] startRequest(RequestDigest{RequestInfo: &request.RequestInfo{IsResourceRequest:false, Path:"/readyz", Verb:"get", APIPrefix:"", APIGroup:"", APIVersion:"", Namespace:"", Resource:"", Subresource:"", Name:"", Parts:[]string(nil)}, User: &user.DefaultInfo{Name:"system:anonymous", UID:"", Groups:[]string{"system:unauthenticated"}, Extra:map[string][]string(nil)}}) => fsName="probes", distMethod=(*v1alpha1.FlowDistinguisherMethod)(nil), plName="exempt", immediate The new flowschema probes works as expected, so the bug is pre-merge verified. After the PR gets merged, the bug will be moved to VERIFIED by the bot automatically or, if not working, by me manually. The LifecycleStale keyword was removed because the bug moved to QE. The bug assignee was notified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6.52 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:5010 |