Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-17477

"e2e-aws-ovn-serial" CI job fails on "[sig-auth][Feature:OAuthServer] [RequestHeaders] [IdP] test RequestHeaders IdP" test: expected "403 Forbidden", got "401 Unauthorized"

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Critical Critical
    • 4.14.0
    • 4.13, 4.14
    • oauth-apiserver
    • Critical
    • No
    • Auth - Sprint 240, Auth - Sprint 241
    • 2
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem

      CI is flaky because of test failures such as the following:

      {  fail [github.com/openshift/origin/test/extended/oauth/requestheaders.go:218]: full response header: HTTP/1.1 403 Forbidden
      Content-Length: 192
      Audit-Id: f6026f9b-06c5-4b4a-9414-8dc5c681b45a
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Content-Type: application/json
      Date: Tue, 08 Aug 2023 11:26:35 GMT
      Expires: 0
      Pragma: no-cache
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-Dns-Prefetch-Control: off
      X-Frame-Options: DENY
      X-Xss-Protection: 1; mode=block
      
      {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"forbidden: User \"system:anonymous\" cannot get path \"/metrics\"","reason":"Forbidden","details":{},"code":403}
      
      
      Expected
          <string>: 403 Forbidden
      to contain substring
          <string>: 401 Unauthorized
      Ginkgo exit error 1: exit with code 1}
      

      This particular failure comes from https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_openshift-apiserver/380/pull-ci-openshift-openshift-apiserver-master-e2e-aws-ovn-serial/1688848417708576768. Search.ci has other similar failures.

      Version-Release number of selected component (if applicable)

      I have seen this in 4.14 CI jobs and 4.13 CI jobs.

      How reproducible

      Presently, search.ci shows the following stats for the past 14 days:

      Found in 2.41% of runs (4.36% of failures) across 1078 total runs and 58 jobs (55.38% failed)
      pull-ci-openshift-openshift-apiserver-master-e2e-aws-ovn-serial (all) - 25 runs, 40% failed, 20% of failures match = 8% impact
      openshift-cluster-network-operator-1874-nightly-4.14-e2e-aws-ovn-serial (all) - 42 runs, 67% failed, 14% of failures match = 10% impact
      pull-ci-openshift-kubernetes-master-e2e-aws-ovn-serial (all) - 59 runs, 54% failed, 6% of failures match = 3% impact
      pull-ci-openshift-origin-master-e2e-aws-ovn-serial (all) - 434 runs, 66% failed, 2% of failures match = 1% impact
      pull-ci-openshift-ovn-kubernetes-master-e2e-aws-ovn-serial (all) - 55 runs, 49% failed, 7% of failures match = 4% impact
      pull-ci-openshift-cluster-etcd-operator-master-e2e-aws-ovn-serial (all) - 60 runs, 58% failed, 3% of failures match = 2% impact
      pull-ci-operator-framework-operator-marketplace-master-e2e-aws-ovn-serial (all) - 24 runs, 38% failed, 22% of failures match = 8% impact
      pull-ci-openshift-cluster-network-operator-master-e2e-aws-ovn-serial (all) - 81 runs, 58% failed, 4% of failures match = 2% impact
      pull-ci-openshift-cluster-ingress-operator-master-e2e-aws-ovn-serial (all) - 35 runs, 46% failed, 13% of failures match = 6% impact
      rehearse-41872-pull-ci-openshift-ovn-kubernetes-release-4.14-e2e-aws-ovn-serial (all) - 1 runs, 100% failed, 100% of failures match = 100% impact
      periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial (all) - 72 runs, 49% failed, 3% of failures match = 1% impact
      pull-ci-openshift-cluster-kube-apiserver-operator-release-4.13-e2e-aws-ovn-serial (all) - 4 runs, 75% failed, 33% of failures match = 25% impact
      pull-ci-openshift-cluster-dns-operator-master-e2e-aws-ovn-serial (all) - 19 runs, 63% failed, 8% of failures match = 5% impact
      

      Steps to Reproduce

      1. Post a PR and have bad luck.
      2. Check search.ci using the link above.

      Actual results

      CI fails.

      Expected results

      CI passes, or fails on some other test failure.

              slaznick@redhat.com Stanislav Láznička (Inactive)
              mmasters1@redhat.com Miciah Masters
              Deepak Punia Deepak Punia (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: