Bug 1741532 - [ci] [azure] The HAProxy router should support reencrypt to services backed by a serving certificate automatically
Summary: [ci] [azure] The HAProxy router should support reencrypt to services backed b...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Networking
Version: 4.2.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 4.2.0
Assignee: Dan Mace
QA Contact: Hongan Li
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-08-15 11:56 UTC by Dan Mace
Modified: 2022-08-04 22:24 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-10-16 06:36:02 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift origin pull 23621 0 None None None 2019-08-16 20:59:32 UTC
Github openshift origin pull 23688 0 None None None 2019-08-30 15:03:00 UTC
Red Hat Product Errata RHBA-2019:2922 0 None None None 2019-10-16 06:36:14 UTC

Description Dan Mace 2019-08-15 11:56:12 UTC 
Description of problem:

As of the time of this report, this test is in the top 3 flakes.

https://testgrid.k8s.io/redhat-openshift-release-informing#redhat-canary-openshift-ocp-installer-e2e-azure-4.2&sort-by-flakiness

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 Hongan Li 2019-08-16 06:30:52 UTC 
seems it is also failing heavily on GCP

https://testgrid.k8s.io/redhat-openshift-release-informing#redhat-canary-openshift-ocp-installer-e2e-gcp-4.2&sort-by-flakiness
Comment 3 Miciah Dashiel Butler Masters 2019-08-21 01:12:55 UTC 
Looks like a duplicate of bug 1743728:

    The DNS provider failed to ensure the record: failed to update dns a record: *.apps.ci-op-xq7nkb8s-282fe.ci.azure.devcluster.openshift.com: dns.RecordSetsClient#CreateOrUpdate: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client '80fc851c-f9e3-41c2-87f2-3a05358d85f7' with object id '80fc851c-f9e3-41c2-87f2-3a05358d85f7' does not have authorization to perform action 'Microsoft.Network/dnsZones/A/write' over scope '/subscriptions/d38f1e38-4bed-438e-b227-833f997adf6a/resourceGroups/os4-common/providers/Microsoft.Network/dnsZones/ci.azure.devcluster.openshift.com/A/*.apps.ci-op-xq7nkb8s-282fe' or the scope is invalid. If access was recently granted, please refresh your credentials."

However, as the the test is superfluous, removing it is a reasonable solution.
Comment 4 Dan Mace 2019-08-30 15:03:01 UTC 
We believe this was solved by https://github.com/openshift/origin/pull/23688. Let's open new bugs as necessary.
Comment 6 Hongan Li 2019-09-04 02:42:34 UTC 
checked testgrid and it passed in recent ci job, so moving to verified.

https://testgrid.k8s.io/redhat-openshift-release-informing#redhat-canary-openshift-ocp-installer-e2e-azure-4.2&sort-by-flakiness=
Comment 7 Kirsten Garrison 2019-09-19 16:29:46 UTC 
This test is still flaky in e2e-azure and is one of our flakiest tests.  Do I need to open another BZ to get this fixed?
Comment 8 Dan Mace 2019-09-19 17:28:32 UTC 
Let's not re-open this bug.
Comment 9 errata-xmlrpc 2019-10-16 06:36:02 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2922
Note You need to log in before you can comment on or make changes to this bug.