Bug 1983616

Summary: Wait for service accounts to be provisioned during e2e tests
Product: OpenShift Container Platform Reporter: Oleg Bulatov <obulatov>
Component: ImageStreamsAssignee: Oleg Bulatov <obulatov>
Status: CLOSED ERRATA QA Contact: wewang <wewang>
Severity: medium Docs Contact:
Priority: medium    
Version: 4.6CC: aos-bugs, jokerman, wzheng, xiuwang
Target Milestone: ---   
Target Release: 4.7.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 1983615 Environment:
Last Closed: 2021-09-21 22:32:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1983615    
Bug Blocks:    

Description Oleg Bulatov 2021-07-19 08:51:52 UTC
+++ This bug was initially created as a clone of Bug #1983615 +++

Description of problem:

When e2e testing framework creates a new namespace, it should wait until service accounts and their registry secrets are created. Otherwise, if a pod is created before the secrets, its images will be anonymously and these pull will fail due to RBAC policies.

Version-Release number of selected component (if applicable):

4.x

How reproducible:

Sometimes

Steps to Reproduce:
1. run a CI test

Actual results:

Failures like: image-registry.openshift-image-registry.svc:5000/openshift/tools: unauthorized: authentication required

Expected results:

openshift/tools should be always pullable by any OpenShift user.

Additional info:

Comment 5 errata-xmlrpc 2021-09-21 22:32:59 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.7.31 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:3510