CNTRLPLANE-941: (monitor): ensure KAS doesn't excessively log unhandled informer errors #30317
Conversation
as this is a signal that there is something that may not be working correctly within the kube-apiserver Signed-off-by: Bryce Palmer <[email protected]>
openshift-ci-robot
added
the
jira/valid-reference
|
@everettraven: This pull request references CNTRLPLANE-941 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.21.0" version, but no target version was set. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
Skipping CI for Draft Pull Request. |
openshift-ci
bot
added
the
do-not-merge/work-in-progress
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: everettraven The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/payload-job periodic-ci-openshift-cluster-authentication-operator-release-4.21-periodics-e2e-gcp-external-oidc-configure-techpreview |
|
@everettraven: trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command
See details on https://pr-payload-tests.ci.openshift.org/runs/ci/444a31e0-9d6b-11f0-8baa-cd0f70e1eac4-0 |
Signed-off-by: Bryce Palmer <[email protected]>
|
/payload-job periodic-ci-openshift-cluster-authentication-operator-release-4.21-periodics-e2e-gcp-external-oidc-configure-techpreview |
|
@everettraven: trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command
See details on https://pr-payload-tests.ci.openshift.org/runs/ci/57465640-9e13-11f0-8d1f-d595b4f3ff1c-0 |
Signed-off-by: Bryce Palmer <[email protected]>
|
/payload-job periodic-ci-openshift-cluster-authentication-operator-release-4.21-periodics-e2e-gcp-external-oidc-configure-techpreview |
|
@everettraven: trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command
See details on https://pr-payload-tests.ci.openshift.org/runs/ci/ad2116b0-9eed-11f0-86f9-2a5ad673167f-0 |
Signed-off-by: Bryce Palmer <[email protected]>
|
/payload-job periodic-ci-openshift-cluster-authentication-operator-release-4.21-periodics-e2e-gcp-external-oidc-configure-techpreview |
|
@everettraven: trigger 0 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command |
|
/payload-job periodic-ci-openshift-cluster-authentication-operator-release-4.21-periodics-e2e-gcp-external-oidc-configure |
|
@everettraven: trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command
See details on https://pr-payload-tests.ci.openshift.org/runs/ci/c12ec490-9fb5-11f0-8fdc-28fa7b05405e-0 |
Signed-off-by: Bryce Palmer <[email protected]>
|
/payload-job periodic-ci-openshift-cluster-authentication-operator-release-4.21-periodics-e2e-gcp-external-oidc-configure |
|
@everettraven: trigger 1 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command
See details on https://pr-payload-tests.ci.openshift.org/runs/ci/2ead5970-9fcd-11f0-92d6-247dbefae6ac-0 |
|
@everettraven: The following tests failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
as this is a signal that there is something that may not be working correctly within the kube-apiserver.
We spotted this as an issue when tearing down the OpenShift OAuth stack during the rollout of an External OIDC enabled cluster. See https://issues.redhat.com/browse/OCPBUGS-45460 for more details.
This led to the discovery that creation of RBAC resources could be blocked because a KAS admission plugin relied on using an informer that would no longer work because the API it relies on is tied to the OpenShift OAuth API server, which we now disable.
This monitor test is meant to serve 2 purposes: