Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1887850

Summary: [sig-auth][Feature:SCC][Early] should not have pod creation failures during install test is flaky
Product: OpenShift Container Platform Reporter: Mike Dame <mdame>
Component: apiserver-authAssignee: Maru Newby <mnewby>
Status: CLOSED ERRATA QA Contact: scheng
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.6CC: aos-bugs, jhrozek, lszaszki, mfojtik, scheng, surbania, vpickard, wking, wlewis
Target Milestone: ---Keywords: Reopened
Target Release: 4.7.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of:
: 1928839 (view as bug list) Environment:
[sig-auth][Feature:SCC][Early] should not have pod creation failures during install
Last Closed: 2021-02-25 19:42:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1928839    

Description Mike Dame 2020-10-13 13:19:43 UTC
test:
[sig-auth][Feature:SCC][Early] should not have pod creation failures during install 

is failing frequently in CI, see search results:
https://search.ci.openshift.org/?maxAge=168h&context=1&type=bug%2Bjunit&name=&maxMatches=5&maxBytes=20971520&groupBy=job&search=%5C%5Bsig-auth%5C%5D%5C%5BFeature%3ASCC%5C%5D%5C%5BEarly%5C%5D+should+not+have+pod+creation+failures+during+install


Link to recent failure: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/release-openshift-origin-installer-e2e-gcp-4.7/1315979427997290496

# [sig-auth][Feature:SCC][Early] should not have pod creation failures during install [Suite:openshift/conformance/parallel]
flake: Error creating: pods "cloud-credential-operator-755fd48ccb-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/cloud-credential-operator-755fd48ccb -n openshift-cloud-credential-operator happened 8 times

Comment 1 Maru Newby 2020-10-14 08:05:41 UTC
A majority of the results of the CI search represent flakes on passing jobs. I think sippy flagging these results is representative of an underlying problem with testgrid that deads discovered earlier today where flakes were being erroneously reported as failures [1]. I'll attempt to confirm my suspicion tomorrow.


1: https://bugzilla.redhat.com/show_bug.cgi?id=1887931

Comment 2 Maru Newby 2020-10-20 05:30:22 UTC
ci search is returning lots of results, but results appear to be mostly passes with flakes and a few exploded clusters. Closing, since the initial report is not actionable.

Comment 3 Victor Pickard 2020-10-23 15:32:38 UTC
This test is still flaking, failing on the first pass, and passing on the subsequent run (usually the 2nd attempt)




test:
[sig-auth][Feature:SCC][Early] should not have pod creation failures during install 

is flaking frequently in CI, see search results:

https://search.ci.openshift.org/?maxAge=168h&context=1&type=bug%2Bjunit&name=&maxMatches=5&maxBytes=20971520&groupBy=job&search=%5C%5Bsig-auth%5C%5D%5C%5BFeature%3ASCC%5C%5D%5C%5BEarly%5C%5D+should+not+have+pod+creation+failures+during+install


Link to recent flake failure on the 1st run (passes on 2nd attempt):
https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/release-openshift-okd-installer-e2e-aws-4.6/1319636670533865472


Error creating: pods "console-operator-df4f45f9-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/console-operator-df4f45f9 -n openshift-console-operator happened 10 times
Error creating: pods "downloads-7fddd87549-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/downloads-7fddd87549 -n openshift-console happened 10 times
Error creating: pods "marketplace-operator-577df5867-" is forbidden: unable to validate against any security context constraint: [] for ReplicaSet.apps/v1/marketplace-operator-577df5867 -n openshift-marketplace happened 10 times

Comment 9 errata-xmlrpc 2021-02-24 15:25:34 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:5633

Comment 11 W. Trevor King 2021-02-25 19:42:48 UTC
You can't re-open a bug that has been shipped on an errata.  If you still see this failure mode on releases after this errata shipped, please open new bugs.