Hide Forgot
failed tests: - [sig-network][Feature:Router] The HAProxy router should expose the profiling endpoints [Skipped:Disconnected] [Suite:openshift/conformance/parallel] - [sig-network][Feature:Router] The HAProxy router should expose a health check on the metrics port [Skipped:Disconnected] [Suite:openshift/conformance/parallel] - [sig-network][Feature:Router] The HAProxy router should enable openshift-monitoring to pull metrics [Skipped:Disconnected] [Suite:openshift/conformance/parallel] - [sig-network][Feature:Router] The HAProxy router should expose prometheus metrics for a route [Skipped:Disconnected] [Suite:openshift/conformance/parallel] this is the common error ``` { fail [github.com/openshift/origin/test/extended/router/metrics.go:89]: Unexpected error: <*errors.errorString | 0xc0019c9960>: { s: "serviceaccount 'openshift-monitoring/prometheus-k8s' does not contain 'prometheus-k8s-token' secret", } serviceaccount 'openshift-monitoring/prometheus-k8s' does not contain 'prometheus-k8s-token' secret occurred} ``` job run: https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_kubernetes/1248/pull-ci-openshift-kubernetes-master-e2e-aws-fips/1520465065768128512 this is where it's failing: https://github.com/openshift/origin/blob/fc70dccd2a29984e4bc9d0823b473756a025ccb7/test/extended/router/metrics.go#L463-L465 probably due to bound service account token volume
cc surbania
Sergiusz, I see there is a fix posted, which you have reviewed; should we assign this BZ to you?
A PR is open to fix the issue: https://github.com/openshift/origin/pull/27100
If you don't mind, I can take it.
Thanks, Krzysztof! I'm assigning the BZ to you.
Verified the issue is not repeating in the prow CI. https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_kubernetes/1264/pull-ci-openshift-kubernetes-master-e2e-aws-fips/1524755678130868224
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:5069