-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
4.22
-
None
In https://github.com/openshift/origin/pull/30292, several changes were made to the conformance suite e2e tests in order to enable the correct execution of the suites in an external OIDC enabled cluster.
However, there have been more issues identified (see recent rehearsals of https://github.com/openshift/release/pull/66981 ); for example:
: [sig-auth][Feature:ControlPlaneSecurity] should have privileged securityContext for control plane init and main containers [Suite:openshift/conformance/parallel]
{ fail [github.com/openshift/origin/test/extended/apiserver/security_context.go:81]: Expected to find at least one pod in openshift-oauth-apiserver
Expected
<[]v1.Pod | len:0, cap:0>: nil
not to be empty}
All such issues must be identified and either fixed/adapted for OIDC, or the respective tests skipped. To facilitate iterations on this bug, the first step is to add (initially failing) manually-triggered presubmits for OIDC conformance tests which can then be invoked in origin PRs, as there are currently no jobs we can use to validate the fixes.
Once all fixes have been identified and implemented, we will convert the manually-triggered presubmits to periodics (which will unblock and solve CNTRLPLANE-947).