[root@cpt-ppc-059 istio]# clear [root@cpt-ppc-059 istio]# gotestsum -f testname --junitfile-project-name istio --junitfile /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/junit-security-ca-custom-root.xml --rerun-fails --packages=./tests/integration/security/ca_custom_root --rerun-fails-max-failures=30 --debug -- -tags=integ -timeout 180m -args -istio.test.skipWorkloads=tproxy,vm -istio.test.openshift -istio.test.kube.helm.values=global.platform=openshift -istio.test.istio.enableCNI=true -istio.test.ci=true -istio.test.env=kube -istio.test.kube.deploy=false -istio.test.stableNamespaces=true -istio.test.work_dir=/home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts exec: [go test -json -tags=integ -timeout 180m ./tests/integration/security/ca_custom_root -args -istio.test.skipWorkloads=tproxy,vm -istio.test.openshift -istio.test.kube.helm.values=global.platform=openshift -istio.test.istio.enableCNI=true -istio.test.ci=true -istio.test.env=kube -istio.test.kube.deploy=false -istio.test.stableNamespaces=true -istio.test.work_dir=/home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts] go test pid: 3412827 2025-06-24T09:50:30.632336Z warn unable to resolve TARGET_OUT. Dir /root/swapnali/check_3.0_tp2/istio/out/linux_ppc64le does not exist 2025-06-24T09:50:30.632386Z warn unable to resolve LOCAL_OUT. Dir /root/swapnali/check_3.0_tp2/istio/out/linux_ppc64le does not exist 2025-06-24T09:50:30.664162Z info tf === Test Framework Settings === 2025-06-24T09:50:30.664240Z info tf TestID: security_ca_custom_root RunID: 99bea46e-3ba9-4ad3-94cf-4f346408f4c7 NoCleanup: false BaseDir: /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts Selector: FailOnDeprecation: false CIMode: true Retries: 0 StableNamespaces: true Revision: SkipWorkloads [tproxy vm] Compatibility: false Revisions: Hub: quay.io/maistra Tag: ibm-p Variant: PullPolicy: Always PullSecret: MaxDumps: 10 HelmRepo: https://istio-release.storage.googleapis.com/charts GatewayConformanceStandardOnly: false 2025-06-24T09:50:30.664246Z info tf =============================== 2025-06-24T09:50:30.665260Z info tf Test run dir: /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts/security-ca-custom-root-99bea46 2025-06-24T09:50:30.665327Z info tf Test Framework Kubernetes environment Settings: Kubeconfigs: [] LoadBalancerSupported: true MCSControllerEnabled: false ControlPlaneTopology: map[] NetworkTopology: map[] ConfigTopology: map[] 2025-06-24T09:50:30.665337Z info tf Flags istio.test.kube.config and istio.test.kube.topology not specified. 2025-06-24T09:50:30.665352Z info tf Using KubeConfigs: [/root/upi/cM/auth/kubeconfig]. 2025-06-24T09:50:30.665358Z info tf === BEGIN: Building clusters === 2025-06-24T09:50:30.667528Z info tf Built Cluster: Name: cluster-0 StableName: primary-0 PrimaryCluster: cluster-0 ConfigCluster: cluster-0 Network: HTTPProxy: ProxyKubectlOnly: false Filename: /root/upi/cM/auth/kubeconfig 2025-06-24T09:50:30.667535Z info tf === DONE: Building clusters === 2025-06-24T09:50:30.667551Z info tf === BEGIN: Setup: 'security_ca_custom_root' === 2025-06-24T09:50:30.727277Z info configmap istio-ca-root-cert is deleted 2025-06-24T09:50:30.727371Z info tf === SUCCESS: context setup function === 2025-06-24T09:50:30.727378Z info tf === BEGIN: Deploy Istio [Suite=security_ca_custom_root] === 2025-06-24T09:50:30.727387Z info tf === Istio Component Config === 2025-06-24T09:50:30.727431Z info tf SystemNamespace: istio-system TelemetryNamespace: istio-system DeployIstio: false DeployEastWestGW: true Values: map[global.hub:quay.io/maistra global.imagePullPolicy:Always global.platform:openshift global.tag:ibm-p global.variant:] PrimaryClusterIOPFile: tests/integration/iop-integration-test-defaults.yaml ConfigClusterIOPFile: tests/integration/iop-integration-test-defaults.yaml RemoteClusterIOPFile: tests/integration/iop-remote-integration-test-defaults.yaml BaseIOPFile: tests/integration/base.yaml SkipWaitForValidationWebhook: false DumpKubernetesManifests: false IstiodlessRemotes: true OperatorOptions: map[] EnableCNI: true IngressGatewayServiceName: IngressGatewayServiceNamespace: IngressGatewayIstioLabel: EgressGatewayServiceName: istio-egressgateway EgressGatewayServiceNamespace: istio-system EgressGatewayIstioLabel: egressgateway SharedMeshConfigName: 2025-06-24T09:50:30.727436Z info tf ================================ 2025-06-24T09:50:30.730909Z info tf skipping deployment as specified in the config 2025-06-24T09:50:30.730929Z info tf === SUCCEEDED: Deploy Istio in 3.547866ms [Suite=security_ca_custom_root]=== 2025-06-24T09:50:30.730938Z info tf === BEGIN: Create namespace echo1 === 2025-06-24T09:50:30.746926Z info tf === SUCCEEDED: Create namespace echo1 in 15.978387ms === Generating RSA private key, 2048 bit long modulus (2 primes) **************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************+++++ ************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************+++++ e is 65537 (0x010001) Signature ok subject= Getting CA Private Key Generated workload-server-naked-foo-[cert|key].pem with URI SAN spiffe://trust-domain-foo/ns/echo1/sa/server-naked-foo /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts/security-ca-custom-root-99bea46/_suite_context/ca-custom-root-2380339988/workload-server-naked-foo-cert.pem: OK Generating RSA private key, 2048 bit long modulus (2 primes) ******************************************************************************************************************************************************************************************************************************************************************************************************************************************************+++++ *+++++ e is 65537 (0x010001) Signature ok subject= Getting CA Private Key Generated workload-server-naked-bar-[cert|key].pem with URI SAN spiffe://trust-domain-bar/ns/echo1/sa/server-naked-bar /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts/security-ca-custom-root-99bea46/_suite_context/ca-custom-root-2380339988/workload-server-naked-bar-cert.pem: OK Generating RSA private key, 2048 bit long modulus (2 primes) *****************************************************************************************************************************************************************************************************************************+++++ *************+++++ e is 65537 (0x010001) Signature ok subject= Getting CA Private Key Generated workload-server-naked-foo-alt-[cert|key].pem with URI SAN spiffe://trust-domain-foo/ns/echo1/sa/server-naked-foo-alt /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts/security-ca-custom-root-99bea46/_suite_context/ca-custom-root-2380339988/workload-server-naked-foo-alt-cert.pem: OK 2025-06-24T09:50:32.446155Z info tf === BEGIN: Create namespace external === 2025-06-24T09:50:32.474699Z info tf === SUCCEEDED: Create namespace external in 28.554179ms === 2025-06-24T09:50:32.632890Z info tf === BEGIN: Deploy echo instances === 2025-06-24T09:50:33.382801Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.412981Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.416621Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.445210Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.463958Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.483008Z info klog Caches are synced for echo 2025-06-24T09:50:33.513297Z info klog Caches are synced for echo 2025-06-24T09:50:33.517508Z info klog Caches are synced for echo 2025-06-24T09:50:33.532967Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.545370Z info klog Caches are synced for echo 2025-06-24T09:50:33.545566Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.550126Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.553055Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.561805Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.561984Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.562095Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.564884Z info klog Caches are synced for echo 2025-06-24T09:50:33.567410Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.568400Z info klog Waiting for caches to sync for echo 2025-06-24T09:50:33.633493Z info klog Caches are synced for echo 2025-06-24T09:50:33.645790Z info klog Caches are synced for echo 2025-06-24T09:50:33.651052Z info klog Caches are synced for echo 2025-06-24T09:50:33.653530Z info klog Caches are synced for echo 2025-06-24T09:50:33.662573Z info klog Caches are synced for echo 2025-06-24T09:50:33.662623Z info klog Caches are synced for echo 2025-06-24T09:50:33.662667Z info klog Caches are synced for echo 2025-06-24T09:50:33.667909Z info klog Caches are synced for echo 2025-06-24T09:50:33.669191Z info klog Caches are synced for echo 2025-06-24T09:51:20.009844Z info tf === SUCCEEDED: Deploy echo instances in 47.376961897s === 2025-06-24T09:51:20.107956Z info tf === DONE: Setup: 'security_ca_custom_root' (49.440395004s) === 2025-06-24T09:51:20.108002Z info tf === BEGIN: Test Run: 'security_ca_custom_root' === PASS tests/integration/security/ca_custom_root.TestMultiRootSetup/From_primary-0/server:server-naked-foo-alt[success] (2.77s) PASS tests/integration/security/ca_custom_root.TestMultiRootSetup/From_primary-0 (2.77s) PASS tests/integration/security/ca_custom_root.TestMultiRootSetup (2.84s) PASS tests/integration/security/ca_custom_root.TestSecureNaming/From_primary-0/mTLS_cert_validation_with_plugin_CA (0.28s) PASS tests/integration/security/ca_custom_root.TestSecureNaming/From_primary-0/connection_fails_when_DR_doesn't_match_SA (3.21s) PASS tests/integration/security/ca_custom_root.TestSecureNaming/From_primary-0/connection_succeeds_when_DR_matches_SA (0.58s) PASS tests/integration/security/ca_custom_root.TestSecureNaming/From_primary-0/connection_fails_when_DR_contains_non-matching,_non-existing_SA (0.68s) PASS tests/integration/security/ca_custom_root.TestSecureNaming/From_primary-0/connection_succeeds_when_SA_is_in_the_list_of_SANs (0.70s) PASS tests/integration/security/ca_custom_root.TestSecureNaming/From_primary-0 (5.46s) PASS tests/integration/security/ca_custom_root.TestSecureNaming (5.47s) PASS tests/integration/security/ca_custom_root.TestTrustDomainAliasSecureNaming/From_primary-0/server:server-naked-foo[success] (3.25s) PASS tests/integration/security/ca_custom_root.TestTrustDomainAliasSecureNaming/From_primary-0/server:server-naked-bar[fail] (0.05s) PASS tests/integration/security/ca_custom_root.TestTrustDomainAliasSecureNaming/From_primary-0 (3.31s) PASS tests/integration/security/ca_custom_root.TestTrustDomainAliasSecureNaming (3.34s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/client[plaintext]->server:http-plaintext[allow] (0.06s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/client[plaintext]->server:tcp-plaintext[allow] (0.04s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[plaintext]->server:http-plaintext[allow] (2.85s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[plaintext]->server:tcp-plaintext[allow] (0.02s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/client[cluster.local]->server:http-mtls[allow] (0.04s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/client[cluster.local]->server:tcp-mtls[allow] (0.06s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[bar]->server:http-mtls[deny] (0.06s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[bar]->server:tcp-mtls[deny] (0.05s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[bar]->server:tcp-mtls-pass-through[deny] (0.05s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[foo]->server:http-mtls[allow] (0.09s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[foo]->server:tcp-mtls[allow] (0.06s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0/naked[foo]->server:tcp-mtls-pass-through[allow] (0.06s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation/From_primary-0 (3.43s) PASS tests/integration/security/ca_custom_root.TestTrustDomainValidation (3.47s) 2025-06-24T09:51:35.234574Z info tf === DONE: Test Run: 'security_ca_custom_root' === 2025-06-24T09:51:35.234612Z info tf === Suite "security_ca_custom_root" run time: 1m4.567062234s === 2025-06-24T09:51:35.234638Z info tf Wrote trace to /home/jenkins/workspace/sail/istio-integration-tests-suites/security-ca_custom_root/artifacts/trace.yaml 2025-06-24T09:51:35.251982Z info tf === BEGIN: Cleanup Istio [Suite=security_ca_custom_root] === 2025-06-24T09:51:35.252056Z info tf === SUCCEEDED: Cleanup Istio in 62.607µs [Suite=security_ca_custom_root] === PASS tests/integration/security/ca_custom_root DONE 28 tests in 77.689s exec: go version [root@cpt-ppc-059 istio]#