-
Bug
-
Resolution: Unresolved
-
Critical
-
None
-
None
-
Backend, CI, CLI, PartnerReview, Plugins
-
5
-
False
-
-
False
-
5
-
OpenShift SPLAT - Sprint 269, OpenShift SPLAT - Sprint 270, OpenShift SPLAT - Sprint 272, OpenShift SPLAT - Sprint 274, OpenShift SPLAT - Sprint 275, OpenShift SPLAT - Sprint 277, OpenShift SPLAT - Sprint 278
User Story:
As an Engineer, I want to investigate end-to-end (e2e) failures caused by the OPCT environment on platform type External on OCP 4.18 "[sig-auth][Feature:UserAPI] users can manipulate groups(...) [Suite:openshift/conformance/parallel]" so that:
- Partners can take advantage of false-positive failures when reviewing their infrastructure throughout VCSP or other integration methods using platform type External.
- The Cert-Ops team would spend less time investigating false positives in VCSP tickets.
- Core OCP can increase positive signals for platform type External jobs.
Description:
The test below is a permanent failure affecting only OPCT environment with Service Account used by the test environment.
The service account has a very permissive cluster role to be used to the test environment. We need to review/restrict but not affect the environment by generating new false-positive failures caused by those new changes.
Test failing:
[sig-auth][Feature:UserAPI] [It] users can manipulate groups [apigroup:user.openshift.io][apigroup:authorization.openshift.io][apigroup:project.openshift.io] [Suite:openshift/conformance/parallel]
Reason:
I0314 23:10:06.005902 51326 client.go:638] Deleted {user.openshift.io/v1, Resource=users valerie-e2e-test-user-api-kxcxf}, err: <nil>
STEP: Destroying namespace "e2e-test-user-api-kxcxf" for this suite. @ 03/14/25 23:10:06.006
• [FAILED] [1.088 seconds]
[sig-auth][Feature:UserAPI] [It] users can manipulate groups [apigroup:user.openshift.io][apigroup:authorization.openshift.io][apigroup:project.openshift.io] [Suite:openshift/conformance/parallel]
github.com/openshift/origin/test/extended/user/basic.go:28
[FAILED] expected [system:authenticated system:masters], got [system:authenticated system:serviceaccounts system:serviceaccounts:opct]
In [It] at: github.com/openshift/origin/test/extended/user/basic.go:54 @ 03/14/25 23:10:05.946
------------------------------
Summarizing 1 Failure:
[FAIL] [sig-auth][Feature:UserAPI] [It] users can manipulate groups [apigroup:user.openshift.io][apigroup:authorization.openshift.io][apigroup:project.openshift.io] [Suite:openshift/conformance/parallel]
github.com/openshift/origin/test/extended/user/basic.go:54
Ran 1 of 1 Specs in 1.088 seconds
FAIL! -- 0 Passed | 1 Failed | 0 Pending | 0 Skipped
fail [github.com/openshift/origin/test/extended/user/basic.go:54]: expected [system:authenticated system:masters], got [system:authenticated system:serviceaccounts system:serviceaccounts:opct]
Ginkgo exit error 1: exit with code 1
Acceptance Criteria:
- Test or OPCT environment/setup is fixed
- When test is a issue, it need to be fixed in origin repository
- When OPCT issue, the tool need to be patched/released
- Test is passing in CI job
Other Information:
- issue created by splat-bot. created from thread: https://redhat-internal.slack.com/archives/C03UZKBRHT5/p1742255407506129
- References: https://issues.redhat.com/browse/OCPBUGS-31407
- blocks
-
OPCT-240 CLI report overview: decrease to zero false-positive failures
-
- Testing
-
- is related to
-
SPLAT-2098 [OPCT] investigate e2e failure: [sig-auth][Feature:UserAPI] users can manipulate groups(...) [Suite:openshift/conformance/parallel]
-
- Closed
-
- relates to
-
-
- Testing
-
-
-
- Closed
-
-
-
- Closed
-