Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1821954

Summary:	release-openshift-origin-installer-e2e-aws-upgrade-4.1-to-4.2-to-4.3-to-4.4-nightly permfailing due to rbac
Product:	OpenShift Container Platform	Reporter:	Ben Parees <bparees>
Component:	kube-apiserver	Assignee:	Stefan Schimanski <sttts>
Status:	CLOSED DUPLICATE	QA Contact:	Xingxing Xia <xxia>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	4.4	CC:	aos-bugs, mfojtik, slaznick
Target Milestone:	---
Target Release:	4.4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-04-08 11:41:02 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ben Parees 2020-04-07 23:23:16 UTC

Description of problem:
Job is never passing:
https://testgrid.k8s.io/redhat-openshift-ocp-release-4.4-informing#release-openshift-origin-installer-e2e-aws-upgrade-4.1-to-4.2-to-4.3-to-4.4-nightly&show-stale-tests=

https://prow.svc.ci.openshift.org/job-history/origin-ci-test/logs/release-openshift-origin-installer-e2e-aws-upgrade-4.1-to-4.2-to-4.3-to-4.4-nightly

Though as seen in testgrid it now look like it's getting further than it was a few days ago.

Sample recent failure:
https://prow.svc.ci.openshift.org/view/gcs/origin-ci-test/logs/release-openshift-origin-installer-e2e-aws-upgrade-4.1-to-4.2-to-4.3-to-4.4-nightly/43

Version-Release number of selected component (if applicable):
4.4, upgraded all the way from 4.1.


How reproducible:
always

looks like at least 2 failures are auth related (rbac config is not right on the cluster after upgrades):

fail [github.com/openshift/origin/test/extended/apiserver/root_403.go:34]: Expected <int>: 200 to equal <int>: 403

fail [github.com/openshift/origin/test/extended/authorization/rbac/groups_default_rules.go:222]: Apr  7 06:36:18.550: system:unauthenticated has extra permissions in namespace "":

Comment 1 Standa Laznicka 2020-04-08 11:41:02 UTC


*** This bug has been marked as a duplicate of bug 1821771 ***