Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-62760

e2e flake: kube-apisever container restart due to delayed bootstrap start

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.21
    • HyperShift
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      https://prow.ci.openshift.org/view/gs/test-platform-results/logs/periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-ovn/1974053232221097984

      https://gcsweb-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/test-platform-results/logs/periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-ovn/1974053232221097984/artifacts/e2e-aws-ovn/hypershift-aws-run-e2e-external/artifacts/TestCreateClusterPrivateWithRouteKAS/namespaces/e2e-clusters-r8pjs-private-sbpj9/core/pods/kube-apiserver-b5cc9c574-t66g2.yaml

      bootstrap is starting more than 1m after the kube-apiserver container starts and the KAS container times out after 1m trying to apply some initial resources that rely on bootstrapping.

      status:
        containerStatuses:
        - name: bootstrap
          ready: true
          resources:
            requests:
              cpu: 10m
              memory: 10Mi
          restartCount: 0
          started: true
          state:
            running:
              startedAt: "2025-10-03T11:17:34Z"
      ...
        - lastState:
            terminated:
              containerID: cri-o://587cd22fed9150e57164b8186e52a4784fb6c17abb829963f1ee4956220d8047
              exitCode: 255
              finishedAt: "2025-10-03T11:17:28Z"
              message: |-
      ...
                E1003 11:17:28.699307       1 storage_rbac.go:329] "Unhandled Error" err="unable to reconcile rolebinding.rbac.authorization.k8s.io/system:controller:token-cleaner in kube-system: rolebindings.rbac.authorization.k8s.io \"system:controller:token-cleaner\" is forbidden: could not list rolebinding restrictions: the server could not find the requested resource (get rolebindingrestrictions.authorization.openshift.io)" logger="UnhandledError"
              reason: Error
              startedAt: "2025-10-03T11:16:56Z"
          name: kube-apiserver
          ready: true
      ...
          restartCount: 1
          started: true
          state:
            running:
              startedAt: "2025-10-03T11:17:55Z"
      

              rh-ee-bclement Borja Clemente Castanera
              sjenning Seth Jennings
              None
              None
              Yu Li Yu Li
              None
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: