This BZ doesn't apply to 4.7. It was already fixed upstream (https://github.com/kubernetes/kubernetes/pull/94589). Can be moved to VERIFIED state.
Despite comment 1 says "doesn't apply to 4.7", still went through the bugs' comments and the k/k PR's comment & code diff to try to know what happened. Also checked openshift/kubernets & openshift/openshift-apiserver 4.7 branches' code, indeed include the PR code. Finally searched "kube-apiserver.*Observed a panic: runtime error: invalid memory address or nil pointer dereference" : https://search.ci.openshift.org/?search=kube-apiserver.*Observed+a+panic%3A+runtime+error%3A+invalid+memory+address+or+nil+pointer+dereference&maxAge=168h&context=1&type=junit&name=&maxMatches=5&maxBytes=20971520&groupBy=job Indeed, no 4.7 nightly tests hit it in kube-apiserver. But searched "openshift-apiserver.*Observed a panic: runtime error: invalid memory address or nil pointer dereference" : https://search.ci.openshift.org/?search=openshift-apiserver.*Observed+a+panic%3A+runtime+error%3A+invalid+memory+address+or+nil+pointer+dereference&maxAge=168h&context=1&type=junit&name=&maxMatches=5&maxBytes=20971520&groupBy=job Found: periodic-ci-openshift-release-master-ocp-4.7-e2e-vsphere-upi - 68 runs, 79% failed, 4% of failures match #1353710954797338624 junit 20 hours ago (https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-release-master-ocp-4.7-e2e-vsphere-upi/1353710954797338624 4.7.0-0.nightly-2021-01-25-142332) # Undiagnosed panic detected in pod pods/openshift-apiserver_apiserver-5994f59d94-h4fkv_openshift-apiserver.log.gz:E0125 15:16:38.289815 1 runtime.go:76] Observed a panic: runtime error: invalid memory address or nil pointer dereference pods/openshift-apiserver_apiserver-5994f59d94-h4fkv_openshift-apiserver.log.gz:E0125 15:16:38.339063 1 runtime.go:76] Observed a panic: runtime error: invalid memory address or nil pointer dereference ------------------------------------------- periodic-ci-openshift-openshift-tests-private-release-4.7-sanity - 21 runs, 100% failed, 5% of failures match #1351922587822723072 junit 5 days ago (https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-openshift-tests-private-release-4.7-sanity/1351922587822723072 4.7.0-0.nightly-2021-01-25-142332) # Undiagnosed panic detected in pod pods/openshift-apiserver_apiserver-6c8f449795-svkms_openshift-apiserver.log.gz:E0120 17:11:38.996955 1 runtime.go:76] Observed a panic: runtime error: invalid memory address or nil pointer dereference pods/openshift-oauth-apiserver_apiserver-6b69d77f4c-8lmp8_oauth-apiserver.log.gz:E0120 17:11:38.996631 1 runtime.go:76] Observed a panic: runtime error: invalid memory address or nil pointer dereference
Correction: the second record #1351922587822723072 is 4.7.0-0.nightly-2021-01-19-095812
Hi Xingxing, Thanks for verifying. You have run into a different panic :) It has already been fixed upstream (https://github.com/kubernetes/kubernetes/pull/97820) and will be fixed by https://bugzilla.redhat.com/show_bug.cgi?id=1917904 for OpenShift To tell apart the panic msg you need to scroll down. If it has "k8s.io/apiserver/plugin/pkg/authorizer/webhook.(*WebhookAuthorizer).Authorize" then it will be addressed by 1917904. For example: E0125 15:16:38.289815 1 runtime.go:76] Observed a panic: runtime error: invalid memory address or nil pointer dereference goroutine 224651 [running]: k8s.io/apiserver/pkg/server/filters.(*timeoutHandler).ServeHTTP.func1.1(0xc007e935c0) k8s.io/apiserver.1/pkg/server/filters/timeout.go:106 +0x113 panic(0x2a0f120, 0x473beb0) runtime/panic.go:969 +0x1b9 k8s.io/apiserver/plugin/pkg/authorizer/webhook.(*WebhookAuthorizer).Authorize(0xc00052bb60, 0x338dda0, 0xc0079533e0, 0x33b4de0, 0xc0087bdd60, 0x2, 0x0, 0x0, 0x0, 0x0)
Lukasz, thanks for clarification. I'm not sure if you "scroll down" in browser, I didn't find the way in browser. Anyway, I downloaded must-gather from periodic-ci-openshift-release-master-ocp-4.7-e2e-vsphere-upi/1353710954797338624/artifacts/e2e-vsphere-upi/gather-must-gather/, indeed saw what you pointed in apiserver-5994f59d94-h4fkv pod logs. Thus moving this bug to VERIFIED.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:5633