Bug 1939552 - [sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin] works for CRD preserving unknown fields in an embedded object [Conformance] [Suite:openshift/conformance/parallel/minimal] [Suite:k8s] [NEEDINFO]
Summary: [sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin] wo...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: kube-apiserver
Version: 4.8
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: ---
: 4.10.0
Assignee: Lukasz Szaszkiewicz
QA Contact: Ke Wang
URL:
Whiteboard: tag-ci LifecycleReset
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-03-16 15:38 UTC by Micah Abbott
Modified: 2022-03-12 04:35 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
[sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin] works for CRD preserving unknown fields in an embedded object [Conformance] [Suite:openshift/conformance/parallel/minimal] [Suite:k8s]
Last Closed: 2022-03-12 04:34:58 UTC
Target Upstream Version:
Embargoed:
mfojtik: needinfo?


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift kubernetes pull 1087 0 None open Bug 2033751: Kube 1.23.0 rebase 2021-12-21 13:36:15 UTC
Red Hat Product Errata RHSA-2022:0056 0 None None None 2022-03-12 04:35:19 UTC

Description Micah Abbott 2021-03-16 15:38:34 UTC
test:
[sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin] works for CRD preserving unknown fields in an embedded object [Conformance] [Suite:openshift/conformance/parallel/minimal] [Suite:k8s] 

is *FLAKING* frequently in CI, see search results:
https://search.ci.openshift.org/?maxAge=168h&context=1&type=bug%2Bjunit&name=&maxMatches=5&maxBytes=20971520&groupBy=job&search=%5C%5Bsig-api-machinery%5C%5D+CustomResourcePublishOpenAPI+%5C%5BPrivileged%3AClusterAdmin%5C%5D+works+for+CRD+preserving+unknown+fields+in+an+embedded+object+%5C%5BConformance%5C%5D+%5C%5BSuite%3Aopenshift%2Fconformance%2Fparallel%2Fminimal%5C%5D+%5C%5BSuite%3Ak8s%5C%5D

https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/release-openshift-ocp-installer-e2e-metal-4.8/1371728029318909952
https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/release-openshift-ocp-installer-e2e-metal-4.8/1371290079061872640


```
I0315 03:47:23.490413   16560 test_context.go:459] Tolerating taints "node-role.kubernetes.io/master" when considering if nodes are ready
[BeforeEach] [Top Level]
  github.com/openshift/origin/test/extended/util/framework.go:1440
[BeforeEach] [Top Level]
  github.com/openshift/origin/test/extended/util/framework.go:1440
[BeforeEach] [Top Level]
  github.com/openshift/origin/test/extended/util/test.go:59
[BeforeEach] [sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin]
  k8s.io/kubernetes.0/test/e2e/framework/framework.go:174
STEP: Creating a kubernetes client
STEP: Building a namespace api object, basename crd-publish-openapi
Mar 15 03:47:24.819: INFO: About to run a Kube e2e test, ensuring namespace is privileged
Mar 15 03:47:25.739: INFO: No PodSecurityPolicies found; assuming PodSecurityPolicy is disabled.
STEP: Waiting for a default service account to be provisioned in namespace
[It] works for CRD preserving unknown fields in an embedded object [Conformance] [Suite:openshift/conformance/parallel/minimal] [Suite:k8s]
  k8s.io/kubernetes.0/test/e2e/framework/framework.go:629
Mar 15 03:47:33.369: INFO: sleeping 45 seconds before running the actual tests, we hope that during all API servers converge during that window, see "https://github.com/kubernetes/kubernetes/pull/90452" for more
STEP: client-side validation (kubectl create and apply) allows request with any unknown properties
Mar 15 03:48:18.369: INFO: Running '/usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 --namespace=e2e-crd-publish-openapi-9441 create -f -'
Mar 15 03:48:19.210: INFO: stderr: ""
Mar 15 03:48:19.210: INFO: stdout: "e2e-test-crd-publish-openapi-7664-crd.crd-publish-openapi-test-unknown-in-nested.example.com/test-cr created\n"
Mar 15 03:48:19.210: INFO: Running '/usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 --namespace=e2e-crd-publish-openapi-9441 delete e2e-test-crd-publish-openapi-7664-crds test-cr'
Mar 15 03:48:19.665: INFO: stderr: ""
Mar 15 03:48:19.665: INFO: stdout: "e2e-test-crd-publish-openapi-7664-crd.crd-publish-openapi-test-unknown-in-nested.example.com \"test-cr\" deleted\n"
Mar 15 03:48:19.665: INFO: Running '/usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 --namespace=e2e-crd-publish-openapi-9441 apply -f -'
Mar 15 03:48:22.363: INFO: stderr: ""
Mar 15 03:48:22.363: INFO: stdout: "e2e-test-crd-publish-openapi-7664-crd.crd-publish-openapi-test-unknown-in-nested.example.com/test-cr created\n"
Mar 15 03:48:22.364: INFO: Running '/usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 --namespace=e2e-crd-publish-openapi-9441 delete e2e-test-crd-publish-openapi-7664-crds test-cr'
Mar 15 03:48:22.938: INFO: stderr: ""
Mar 15 03:48:22.938: INFO: stdout: "e2e-test-crd-publish-openapi-7664-crd.crd-publish-openapi-test-unknown-in-nested.example.com \"test-cr\" deleted\n"
STEP: kubectl explain works to explain CR
Mar 15 03:48:22.938: INFO: Running '/usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 explain e2e-test-crd-publish-openapi-7664-crds'
Mar 15 03:48:23.575: INFO: rc: 1
Mar 15 03:48:23.575: FAIL: failed to explain e2e-test-crd-publish-openapi-7664-crds: error running /usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 explain e2e-test-crd-publish-openapi-7664-crds:
Command stdout:

stderr:
error: couldn't find resource for "crd-publish-openapi-test-unknown-in-nested.example.com/v1, Kind=E2e-test-crd-publish-openapi-7664-crd"

error:
exit status 1

Full Stack Trace
github.com/onsi/ginkgo/internal/leafnodes.(*runner).runSync(0xc00041a840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/leafnodes/runner.go:113 +0xa3
github.com/onsi/ginkgo/internal/leafnodes.(*runner).run(0xc00041a840, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/leafnodes/runner.go:64 +0xd7
github.com/onsi/ginkgo/internal/leafnodes.(*ItNode).Run(0xc000a28180, 0x685e0e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/leafnodes/it_node.go:26 +0x67
github.com/onsi/ginkgo/internal/spec.(*Spec).runSample(0xc002bf6870, 0x0, 0x685e0e0, 0xc0003456c0)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/spec/spec.go:215 +0x691
github.com/onsi/ginkgo/internal/spec.(*Spec).Run(0xc002bf6870, 0x685e0e0, 0xc0003456c0)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/spec/spec.go:138 +0xf2
github.com/onsi/ginkgo/internal/specrunner.(*SpecRunner).runSpec(0xc00296c000, 0xc002bf6870, 0x0)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/specrunner/spec_runner.go:200 +0x111
github.com/onsi/ginkgo/internal/specrunner.(*SpecRunner).runSpecs(0xc00296c000, 0x1)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/specrunner/spec_runner.go:170 +0x127
github.com/onsi/ginkgo/internal/specrunner.(*SpecRunner).Run(0xc00296c000, 0xc0030ca020)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/specrunner/spec_runner.go:66 +0x117
github.com/onsi/ginkgo/internal/suite.(*Suite).Run(0xc000331b30, 0x685e3c0, 0xc0028ae280, 0x0, 0x0, 0xc00175a020, 0x1, 0x1, 0x693e220, 0xc0003456c0, ...)
	github.com/onsi/ginkgo.0-origin.0+incompatible/internal/suite/suite.go:62 +0x426
github.com/openshift/origin/pkg/test/ginkgo.(*TestOptions).Run(0xc00262e5a0, 0xc002620960, 0x1, 0x1, 0x5ddc267, 0x3483f20)
	github.com/openshift/origin/pkg/test/ginkgo/cmd_runtest.go:61 +0x438
main.newRunTestCommand.func1.1()
	github.com/openshift/origin/cmd/openshift-tests/openshift-tests.go:426 +0x4e
github.com/openshift/origin/test/extended/util.WithCleanup(0xc001ebfbf8)
	github.com/openshift/origin/test/extended/util/test.go:167 +0x5f
main.newRunTestCommand.func1(0xc001649340, 0xc002620960, 0x1, 0x1, 0x0, 0x0)
	github.com/openshift/origin/cmd/openshift-tests/openshift-tests.go:426 +0x2f2
github.com/spf13/cobra.(*Command).execute(0xc001649340, 0xc002620930, 0x1, 0x1, 0xc001649340, 0xc002620930)
	github.com/spf13/cobra.1/command.go:850 +0x47c
github.com/spf13/cobra.(*Command).ExecuteC(0xc001648580, 0x0, 0x68657a0, 0x9551640)
	github.com/spf13/cobra.1/command.go:958 +0x375
github.com/spf13/cobra.(*Command).Execute(...)
	github.com/spf13/cobra.1/command.go:895
main.main.func1(0xc001648580, 0x0, 0x0)
	github.com/openshift/origin/cmd/openshift-tests/openshift-tests.go:84 +0x94
main.main()
	github.com/openshift/origin/cmd/openshift-tests/openshift-tests.go:85 +0x3ea
[AfterEach] [sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin]
  k8s.io/kubernetes.0/test/e2e/framework/framework.go:175
STEP: Collecting events from namespace "e2e-crd-publish-openapi-9441".
STEP: Found 1 events.
Mar 15 03:48:23.649: INFO: At 2021-03-15 03:47:23 +0000 UTC - event for e2e-crd-publish-openapi-9441: {namespace-security-allocation-controller } CreatedSCCRanges: created SCC ranges
Mar 15 03:48:23.721: INFO: POD  NODE  PHASE  GRACE  CONDITIONS
Mar 15 03:48:23.721: INFO: 
Mar 15 03:48:23.940: INFO: skipping dumping cluster info - cluster too large
STEP: Destroying namespace "e2e-crd-publish-openapi-9441" for this suite.
fail [github.com/onsi/ginkgo.0-origin.0+incompatible/internal/leafnodes/runner.go:113]: Mar 15 03:48:23.575: failed to explain e2e-test-crd-publish-openapi-7664-crds: error running /usr/bin/kubectl --server=https://api.ci-op-2z4kd7d3-57772.origin-ci-int-aws.dev.rhcloud.com:6443 --kubeconfig=/tmp/admin.kubeconfig --namespace=e2e-crd-publish-openapi-9441 explain e2e-test-crd-publish-openapi-7664-crds:
Command stdout:

stderr:
error: couldn't find resource for "crd-publish-openapi-test-unknown-in-nested.example.com/v1, Kind=E2e-test-crd-publish-openapi-7664-crd"

error:
exit status 1
```


Seeing it on 4.7 jobs oo; seems to affect `metal` jobs the most

Comment 1 Michal Fojtik 2021-04-15 15:48:26 UTC
This bug hasn't had any activity in the last 30 days. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet. As such, we're marking this bug as "LifecycleStale" and decreasing the severity/priority. If you have further information on the current state of the bug, please update it, otherwise this bug can be closed in about 7 days. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant. Additionally, you can add LifecycleFrozen into Keywords if you think this bug should never be marked as stale. Please consult with bug assignee before you do that.

Comment 2 Lukasz Szaszkiewicz 2021-06-11 11:58:41 UTC
I’m adding UpcomingSprint, because I was occupied by fixing bugs with higher priority/severity, developing new features with higher priority, or developing new features to improve stability at a macro level. I will revisit this bug next sprint.

Comment 3 Lukasz Szaszkiewicz 2021-07-05 12:29:04 UTC
I’m adding UpcomingSprint, because I was occupied by fixing bugs with higher priority/severity, developing new features with higher priority, or developing new features to improve stability at a macro level. I will revisit this bug next sprint.

Comment 4 Lukasz Szaszkiewicz 2021-09-03 13:40:44 UTC
I’m adding UpcomingSprint, because I was occupied by fixing bugs with higher priority/severity, developing new features with higher priority, or developing new features to improve stability at a macro level. I will revisit this bug next sprint.

Comment 5 Lukasz Szaszkiewicz 2021-11-05 12:29:59 UTC
I’m adding UpcomingSprint, because I was occupied by fixing bugs with higher priority/severity, developing new features with higher priority, or developing new features to improve stability at a macro level. I will revisit this bug next sprint.

Comment 7 Michal Fojtik 2022-01-14 11:11:47 UTC
The LifecycleStale keyword was removed because the bug moved to QE.
The bug assignee was notified.

Comment 9 Ke Wang 2022-01-27 09:26:11 UTC
Checked the ci test results for https://testgrid.k8s.io/redhat-openshift-ocp-release-4.10-informing#release-openshift-ocp-installer-e2e-metal-4.10, There is no good test result to take a look.

We can see the test [sig-api-machinery] CustomResourcePublishOpenAPI [Privileged:ClusterAdmin] works for CRD preserving unknown fields in an embedded object [Conformance] [Suite:openshift/conformance/parallel/minimal] [Suite:k8s] works well with the following OCP 4.10 tests, 

https://testgrid.k8s.io/redhat-openshift-ocp-release-4.10-informing#periodic-ci-openshift-release-master-ci-4.10-e2e-gcp
https://testgrid.k8s.io/redhat-openshift-ocp-release-4.10-informing#periodic-ci-openshift-release-master-ci-4.10-e2e-gcp-ovn
https://testgrid.k8s.io/redhat-openshift-ocp-release-4.10-informing#periodic-ci-openshift-release-master-ci-4.10-e2e-aws

So can move the bug VERIFIED.

Comment 12 errata-xmlrpc 2022-03-12 04:34:58 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0056


Note You need to log in before you can comment on or make changes to this bug.