Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-71206

Openshift conformance suites fail for external OIDC enabled clusters

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.22
    • Test Framework
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      In https://github.com/openshift/origin/pull/30292, several changes were made to the conformance suite e2e tests in order to enable the correct execution of the suites in an external OIDC enabled cluster.

      However, there have been more issues identified (see recent rehearsals of https://github.com/openshift/release/pull/66981 ); for example:

      : [sig-auth][Feature:ControlPlaneSecurity] should have privileged securityContext for control plane init and main containers [Suite:openshift/conformance/parallel]
      {  fail [github.com/openshift/origin/test/extended/apiserver/security_context.go:81]: Expected to find at least one pod in openshift-oauth-apiserver
      Expected
          <[]v1.Pod | len:0, cap:0>: nil
      not to be empty}
      

      All such issues must be identified and either fixed/adapted for OIDC, or the respective tests skipped. To facilitate iterations on this bug, the first step is to add (initially failing) manually-triggered presubmits for OIDC conformance tests which can then be invoked in origin PRs, as there are currently no jobs we can use to validate the fixes.

      Once all fixes have been identified and implemented, we will convert the manually-triggered presubmits to periodics (which will unblock and solve CNTRLPLANE-947).

              rh-ee-irinis Ilias Rinis
              rh-ee-irinis Ilias Rinis
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: