Bug 1901138 - [sig-auth][Feature:LDAP][Serial] ldap group sync can sync groups from ldap [NEEDINFO]
Summary: [sig-auth][Feature:LDAP][Serial] ldap group sync can sync groups from ldap
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: apiserver-auth
Version: 4.6
Hardware: Unspecified
OS: Unspecified
low
high
Target Milestone: ---
: 4.8.0
Assignee: Standa Laznicka
QA Contact: pmali
URL:
Whiteboard: LifecycleStale
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-11-24 15:19 UTC by Urvashi Mohnani
Modified: 2021-06-17 13:42 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
: 1902008 (view as bug list)
Environment:
[sig-auth][Feature:LDAP][Serial] ldap group sync can sync groups from ldap
Last Closed: 2021-04-30 12:31:33 UTC
Target Upstream Version:
Embargoed:
mfojtik: needinfo?


Attachments (Terms of Use)

Description Urvashi Mohnani 2020-11-24 15:19:11 UTC
test:
[sig-auth][Feature:LDAP][Serial] ldap group sync can sync groups from ldap 

is failing frequently in CI, see search results:
https://search.ci.openshift.org/?maxAge=168h&context=1&type=bug%2Bjunit&name=&maxMatches=5&maxBytes=20971520&groupBy=job&search=%5C%5Bsig-auth%5C%5D%5C%5BFeature%3ALDAP%5C%5D%5C%5BSerial%5C%5D+ldap+group+sync+can+sync+groups+from+ldap


fail [github.com/openshift/origin/test/extended/oauth/groupsync.go:32]: Unexpected error:
    <*errors.errorString | 0xc001bbea40>: {
        s: "replica for openldap-server not avaiable: timed out waiting for the condition",
    }
    replica for openldap-server not avaiable: timed out waiting for the condition
occurred

This test failure is happening on vsphere-ipi and vsphere-upi only. The pass rate of this test has gone down from over 90% to 70% and 40% respectively.

https://sippy.ci.openshift.org/testdetails?release=4.6&test=%5Bsig-auth%5D%5BFeature%3ALDAP%5D%5BSerial%5D+ldap+group+sync+can+sync+groups+from+ldap

Comment 1 Standa Laznicka 2020-11-25 08:36:17 UTC
This is a fallout of the recent Docker image pull policies. The image used by the test is hosted on docker, not cached by the CI infra, even though it hasn't changed for the past 2 years, and when the limit of image pulls is reached, this test will just fail.

I guess we'll have to find a different place for the image to live?

Comment 2 Joel Speed 2020-11-26 14:55:15 UTC
I'm on build watcher today, leaving this note for future build watchers, looks like similar issues are being seen across all releases for this an other auth tests (eg [sig-auth][Feature:SecurityContextConstraints] TestPodDefaultCapabilities). Docker pull rate limiting is causing havoc across the origin suite.

Comment 5 Michal Fojtik 2021-01-06 08:58:43 UTC
This bug hasn't had any activity in the last 30 days. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet. As such, we're marking this bug as "LifecycleStale" and decreasing the severity/priority. If you have further information on the current state of the bug, please update it, otherwise this bug can be closed in about 7 days. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant. Additionally, you can add LifecycleFrozen into Keywords if you think this bug should never be marked as stale. Please consult with bug assignee before you do that.

Comment 7 Michal Fojtik 2021-01-15 09:39:05 UTC
The LifecycleStale keyword was removed because the bug got commented on recently.
The bug assignee was notified.

Comment 8 Michal Fojtik 2021-02-14 10:10:08 UTC
This bug hasn't had any activity in the last 30 days. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet. As such, we're marking this bug as "LifecycleStale" and decreasing the severity/priority. If you have further information on the current state of the bug, please update it, otherwise this bug can be closed in about 7 days. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant. Additionally, you can add LifecycleFrozen into Keywords if you think this bug should never be marked as stale. Please consult with bug assignee before you do that.

Comment 10 Michal Fojtik 2021-03-19 10:21:15 UTC
The LifecycleStale keyword was removed because the bug got commented on recently.
The bug assignee was notified.

Comment 11 Michal Fojtik 2021-04-18 11:00:21 UTC
This bug hasn't had any activity in the last 30 days. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet. As such, we're marking this bug as "LifecycleStale" and decreasing the severity/priority. If you have further information on the current state of the bug, please update it, otherwise this bug can be closed in about 7 days. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant. Additionally, you can add LifecycleFrozen into Keywords if you think this bug should never be marked as stale. Please consult with bug assignee before you do that.

Comment 12 Standa Laznicka 2021-04-30 12:31:33 UTC
I can see that the fixes from other BZs helped with this issue, I'm going to close the BZ as no longer relevant.


Note You need to log in before you can comment on or make changes to this bug.