Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1870540

Summary:	Traffic spikes every 10 minutes to master API
Product:	OpenShift Container Platform	Reporter:	Maciej Szulik <maszulik>
Component:	kube-controller-manager	Assignee:	Mike Dame <mdame>
Status:	CLOSED ERRATA	QA Contact:	zhou ying <yinzhou>
Severity:	high	Docs Contact:
Priority:	urgent
Version:	3.11.0	CC:	antgarci, aos-bugs, asoni, bbennett, dmellado, dporter, jolee, maszulik, mdame, mfojtik, mnewby, nelluri, openshift-bugs-escalate, rcarrier, rkant, rvanderp, suchaudh, svaughn, tsmetana, vlaad, yinzhou
Target Milestone:	---	Keywords:	UpcomingSprint
Target Release:	3.11.z
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1854434	Environment:
Last Closed:	2020-09-16 07:46:50 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1854434
Bug Blocks:

Comment 1 Mike Dame 2020-08-21 13:28:08 UTC

I’m adding UpcomingSprint, because I was occupied by fixing bugs with higher priority/severity, developing new features with higher priority, or developing new features to improve stability at a macro level. I will revisit this bug in a future sprint.

Comment 2 Mike Dame 2020-09-04 19:04:00 UTC

Both the Upstream PR (https://github.com/kubernetes/kubernetes/pull/94112) and the 3.11 backport (https://github.com/openshift/origin/pull/25426) have been approved and are in the merge queue. These should merge later today if CI passes.

Comment 10 zhou ying 2020-09-14 05:27:43 UTC

Compared with v3.11.286 and  v3.11.272, Both created two project with multiple endpoints service like this : 

`oc new-app --as-deployment-config  --docker-image=aosqe/hello-openshift`
...
    * Ports 8080/tcp, 8888/tcp will be load balanced by service "hello-openshift"
...

`oc new-app --as-deployment-config  --docker-image=openshift/hello-openshift`
...
    * Ports 8080/tcp, 8888/tcp will be load balanced by service "hello-openshift"
...


Then filter the audit logs :
[root@ip-172-18-2-186 master]# oc version 
oc v3.11.272
kubernetes v1.11.0+d4cacc0
features: Basic-Auth GSSAPI Kerberos SPNEGO

Server https://ip-172-18-2-186.ec2.internal:8443
openshift v3.11.272
kubernetes v1.11.0+d4cacc0
[root@ip-172-18-2-186 master]# grep -Enr "endpoint-controller" audit-ocp* |wc -l 
78



[root@ip-172-18-2-157 master]# oc version 
oc v3.11.286
kubernetes v1.11.0+d4cacc0
features: Basic-Auth GSSAPI Kerberos SPNEGO

Server https://ip-172-18-2-157.ec2.internal:8443
openshift v3.11.286
kubernetes v1.11.0+d4cacc0
[root@ip-172-18-2-157 master]# grep -Enr "endpoint-controller" audit-ocp* |wc -l 
0


So will move to verified status.

Comment 12 errata-xmlrpc 2020-09-16 07:46:50 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 3.11.286 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3695