Bug 2017027

Summary:	[sig-auth][Feature:SCC][Early] should not have pod creation failures during install [Suite:openshift/conformance/parallel]
Product:	OpenShift Container Platform	Reporter:	Sergiusz Urbaniak <surbania>
Component:	apiserver-auth	Assignee:	Sergiusz Urbaniak <surbania>
Status:	CLOSED ERRATA	QA Contact:	Yash Tripathi <ytripath>
Severity:	high	Docs Contact:
Priority:	medium
Version:	4.8	CC:	aos-bugs, dgoodwin, ercohen, gzaidman, jsafrane, mfojtik, mnewby, sippy, slaznick, stbenjam, surbania, wking, xxia, yinzhou, ytripath
Target Milestone:	---
Target Release:	4.8.z
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	tag-ci LifecycleReset
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	2017020	Environment:	job=periodic-ci-openshift-release-master-ci-4.10-e2e-aws-serial
Last Closed:	2021-11-30 10:25:45 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2017020
Bug Blocks:

Comment 1 Sergiusz Urbaniak 2021-11-08 16:10:51 UTC

reviewed-in-sprint: not enough capacity to work on this bugzilla.

Comment 6 Yash Tripathi 2021-11-19 06:51:21 UTC

Following steps were followed to verify this bug

git clone git:openshift/kubernetes.git
git checkout -b release-4.8 origin/release-4.8
git blame vendor/github.com/openshift/apiserver-library-go/pkg/securitycontextconstraints/sccadmission/admission.go > /tmp/blame.txt

Searching for 'function requireStandardSCCs', as it is present in the PR(https://github.com/openshift/apiserver-library-go/pull/68)
grep 'func requireStandardSCCs' /tmp/blame.txt

grep returned no results, so bump PR is either not raise or not merged in release-4.8

Comment 11 Yash Tripathi 2021-11-25 08:56:28 UTC

We have used the following query parameters to verify
2 days: https://search.ci.openshift.org/?search=unable+to+validate+against+any+security+context+constraint&maxAge=48h0m0s&context=1&type=junit&name=4%5C.8&excludeName=upgrade&maxMatches=5&maxBytes=20971520&groupBy=job
3 days: https://search.ci.openshift.org/?search=unable+to+validate+against+any+security+context+constraint&maxAge=72h0m0s&context=1&type=junit&name=4%5C.8&excludeName=upgrade&maxMatches=5&maxBytes=20971520&groupBy=job
3 days results have failures, 2 days one's don't
Hence the bug is no longer seen from the past 2 days, the PR was merged around 3 days ago

Comment 13 errata-xmlrpc 2021-11-30 10:25:45 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.8.22 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4830