Bug 1887850 - [sig-auth][Feature:SCC][Early] should not have pod creation failures during install test is flaky
Summary: [sig-auth][Feature:SCC][Early] should not have pod creation failures during i...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: apiserver-auth
Version: 4.6
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 4.7.0
Assignee: Maru Newby
QA Contact: scheng
URL:
Whiteboard:
Depends On:
Blocks: 1928839
TreeView+ depends on / blocked
 
Reported: 2020-10-13 13:19 UTC by Mike Dame
Modified: 2021-02-25 19:42 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
: 1928839 (view as bug list)
Environment:
[sig-auth][Feature:SCC][Early] should not have pod creation failures during install
Last Closed: 2021-02-25 19:42:48 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift origin pull 25628 0 None closed Bug 1887850: update SCC test to either pass or fail, but never flake 2021-02-15 10:31:58 UTC
Red Hat Product Errata RHSA-2020:5633 0 None None None 2021-02-24 15:26:00 UTC

Description Mike Dame 2020-10-13 13:19:43 UTC
test:
[sig-auth][Feature:SCC][Early] should not have pod creation failures during install 

is failing frequently in CI, see search results:
https://search.ci.openshift.org/?maxAge=168h&context=1&type=bug%2Bjunit&name=&maxMatches=5&maxBytes=20971520&groupBy=job&search=%5C%5Bsig-auth%5C%5D%5C%5BFeature%3ASCC%5C%5D%5C%5BEarly%5C%5D+should+not+have+pod+creation+failures+during+install


Link to recent failure: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/release-openshift-origin-installer-e2e-gcp-4.7/1315979427997290496

# [sig-auth][Feature:SCC][Early] should not have pod creation failures during install [Suite:openshift/conformance/parallel]
flake: Error creating: pods "cloud-credential-operator-755fd48ccb-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/cloud-credential-operator-755fd48ccb -n openshift-cloud-credential-operator happened 8 times

Comment 1 Maru Newby 2020-10-14 08:05:41 UTC
A majority of the results of the CI search represent flakes on passing jobs. I think sippy flagging these results is representative of an underlying problem with testgrid that deads discovered earlier today where flakes were being erroneously reported as failures [1]. I'll attempt to confirm my suspicion tomorrow.


1: https://bugzilla.redhat.com/show_bug.cgi?id=1887931

Comment 2 Maru Newby 2020-10-20 05:30:22 UTC
ci search is returning lots of results, but results appear to be mostly passes with flakes and a few exploded clusters. Closing, since the initial report is not actionable.

Comment 3 Victor Pickard 2020-10-23 15:32:38 UTC
This test is still flaking, failing on the first pass, and passing on the subsequent run (usually the 2nd attempt)




test:
[sig-auth][Feature:SCC][Early] should not have pod creation failures during install 

is flaking frequently in CI, see search results:

https://search.ci.openshift.org/?maxAge=168h&context=1&type=bug%2Bjunit&name=&maxMatches=5&maxBytes=20971520&groupBy=job&search=%5C%5Bsig-auth%5C%5D%5C%5BFeature%3ASCC%5C%5D%5C%5BEarly%5C%5D+should+not+have+pod+creation+failures+during+install


Link to recent flake failure on the 1st run (passes on 2nd attempt):
https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/release-openshift-okd-installer-e2e-aws-4.6/1319636670533865472


Error creating: pods "console-operator-df4f45f9-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/console-operator-df4f45f9 -n openshift-console-operator happened 10 times
Error creating: pods "downloads-7fddd87549-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/downloads-7fddd87549 -n openshift-console happened 10 times
Error creating: pods "marketplace-operator-577df5867-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/marketplace-operator-577df5867 -n openshift-marketplace happened 10 times

Comment 9 errata-xmlrpc 2021-02-24 15:25:34 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:5633

Comment 11 W. Trevor King 2021-02-25 19:42:48 UTC
You can't re-open a bug that has been shipped on an errata.  If you still see this failure mode on releases after this errata shipped, please open new bugs.


Note You need to log in before you can comment on or make changes to this bug.