Bug 1977710

Summary: builds: e2e-proxy tests fail due to Redis security protections
Product: OpenShift Container Platform Reporter: OpenShift BugZilla Robot <openshift-bugzilla-robot>
Component: BuildAssignee: Adam Kaplan <adam.kaplan>
Status: CLOSED ERRATA QA Contact: XiuJuan Wang <xiuwang>
Severity: high Docs Contact:
Priority: high    
Version: 4.8CC: aos-bugs
Target Milestone: ---   
Target Release: 4.8.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-08-03 06:09:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1977454    
Bug Blocks:    

Description OpenShift BugZilla Robot 2021-06-30 10:25:10 UTC 
+++ This bug was initially created as a clone of Bug #1977454 +++

Description of problem:

The build in-cluster service test deploys a Redis service, then checks the service availability by running a `curl` command against the redis endpoint.
Newer versions of Redis won't allow these requests when proxy environment variables are set.


Version-Release number of selected component (if applicable): 4.8


How reproducible: Always


Steps to Reproduce:
1. Install OCP behind a proxy
2. Start a Redis service in a project
3. In the same project, start a build which connects to the redis service

Actual results:

Connection is aborted.
Redis error message:

```
# Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.
```


Expected results:

Connection succeeds

Additional info:

https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-proxy/1409477255171674112
Comment 3 XiuJuan Wang 2021-07-26 06:32:52 UTC 
Validate e2e passed.
Comment 6 errata-xmlrpc 2021-08-03 06:09:58 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.8.3 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:2896