Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1875774

Summary: Operators egress traffic fail/timeout
Product: OpenShift Container Platform Reporter: Alberto <agarcial>
Component: NetworkingAssignee: Ben Bennett <bbennett>
Networking sub component: openshift-sdn QA Contact: zhaozhanqi <zzhao>
Status: CLOSED DUPLICATE Docs Contact:
Severity: medium    
Priority: unspecified CC: aconstan
Version: 4.6   
Target Milestone: ---   
Target Release: 4.6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-09-09 07:36:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Alberto 2020-09-04 10:41:44 UTC 
Description of problem:
Spin off of https://bugzilla.redhat.com/show_bug.cgi?id=1874914

To address

3 - release-openshift-ocp-installer-e2e-azure-ovn-4.6 [8]:
Operators have not egress traffic. See [9]

"time="2020-09-04T07:33:35Z" level=error msg="error while validating cloud credentials: failed checking create cloud creds: adal: Failed to execute the refresh request. Error = 'Post \"https://login.microsoftonline.com/6047c7e9-b2ad-488d-a54e-dc3f6be6a7ee/oauth2/token?api-version=1.0\": dial tcp: lookup login.microsoftonline.com on 172.30.0.10:53: read udp 10.128.0.30:52694->172.30.0.10:53: read: connection refused'" controller=secretannotator"

4 - release-openshift-ocp-installer-e2e-azure-serial-4.6
Operators have not egress traffic. See [10]

time="2020-09-04T07:49:42Z" level=error msg="error while creating service principal" controller=secretannotator error="adal: Failed to execute the refresh request. Error = 'Post \"https://login.microsoftonline.com/6047c7e9-b2ad-488d-a54e-dc3f6be6a7ee/oauth2/token?api-version=1.0\": dial tcp: i/o timeout'"
time="2020-09-04T07:49:42Z" level=error msg="error while validating cloud credentials: failed checking create cloud creds: adal: Failed to execute the refresh request. Error = 'Post \"https://login.microsoftonline.com/6047c7e9-b2ad-488d-a54e-dc3f6be6a7ee/oauth2/token?api-version=1.0\": dial tcp: i/o timeout'" controller=secretannotator
time="2020-09-04T07:49:42Z" level=info msg="syncing cluster operator status" controller=secretannotator_status
time="2020-09-04T07:49:42Z" level=info msg="cluster operator status updated" controller=secretannotator_status
time="2020-09-04T07:49:47Z" level=info msg="validating cloud cred secret" controller=secretannotator

[8] https://prow.ci.openshift.org/job-history/origin-ci-test/logs/release-openshift-ocp-installer-e2e-azure-ovn-4.6

[9] https://storage.googleapis.com/origin-ci-test/logs/release-openshift-ocp-installer-e2e-azure-ovn-4.6/1301773738949218304/artifacts/e2e-azure/pods/openshift-cloud-credential-operator_cloud-credential-operator-57c5dfd7-q4wph_cloud-credential-operator.log

[10] https://storage.googleapis.com/origin-ci-test/logs/release-openshift-ocp-installer-e2e-azure-serial-4.6/1301773746377330688/artifacts/e2e-azure-serial/pods/openshift-cloud-credential-operator_cloud-credential-operator-57c5dfd7-nf5b8_cloud-credential-operator.log
Comment 1 Alexander Constantinescu 2020-09-07 14:18:50 UTC 
Punting over to Routing seeing as how the referenced bugs is assigned to them (https://bugzilla.redhat.com/show_bug.cgi?id=1874914) and nothing was found on the SDN's side
Comment 2 Alberto 2020-09-07 14:35:37 UTC 
Hey Alexander, I'm moving this back to network as either in the original bug or this one I can't find a technical reasoning elaborated for why the specifics links in this description are timing out when doing egress requests or for https://bugzilla.redhat.com/show_bug.cgi?id=1874914#c1.

If you still think this belong to routing, please choose the right component "Routing".
Comment 3 Alexander Constantinescu 2020-09-07 14:43:24 UTC 
https://bugzilla.redhat.com/show_bug.cgi?id=1874914#c6 specifically mentions it beeing an AWS API issue. 

I mistakenly wrote "Routing", I wanted to send it to the same team handling https://bugzilla.redhat.com/show_bug.cgi?id=1874914 which is why I sent it to them.
Comment 4 Alberto 2020-09-07 15:25:32 UTC 
Hey Alexander, please see that the original ticket was wide in scope. It was dissected here https://bugzilla.redhat.com/show_bug.cgi?id=1874914#c8 and this ticket is now narrowed to the failures elaborated in the description while the particular aws proxy issue is tracked here https://bugzilla.redhat.com/show_bug.cgi?id=1875773.
No operators are able to do egress requests in the jobs in the desc. Please don't move this back to "cloud" as it does not belong there and it won't help to improve the product. This needs to be investigated and if there's a technical reason why this should be moved to a different team please elaborate it with a comment before doing so.
Comment 5 Alberto 2020-09-09 07:36:52 UTC 
Triaging this in https://bugzilla.redhat.com/show_bug.cgi?id=1877059

*** This bug has been marked as a duplicate of bug 1877059 ***