kubernetes-sigs / windows-testing

Containers, scripts and documentation for running Kubernetes tests with Windows nodes
Apache License 2.0
40 stars 54 forks source link

Revert "Wiring user identities" #465

Closed jsturtevant closed 1 month ago

jsturtevant commented 1 month ago

This reverts commit 8dc7bb1d147adc1875c8908edd6365d3ef929f37.

This is passing for ws2022 but started failing in ws2019 with E0802 14:31:52.114636 6048 kuberuntime_manager.go:269] "Failed to register CRI auth plugins" err="plugin binary directory /var/lib/kubelet/credential-provider did not exist"

also seeing some interesting errors in logs:

b1d0a36836c1","Type":"ContainerStarted","Data":"34516e609fce5ffa186d271994a9288502d1a52e440cb9ca51a309d5520b6eea"}
E0802 17:18:50.454190    4912 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"e2eprivatecommunity.azurecr.io/alpine:3.7\": failed to resolve reference \"e2eprivatecommunity.azurecr.io/alpine:3.7\": e2eprivatecommunity.azurecr.io/alpine:3.7: not found" image="e2eprivatecommunity.azurecr.io/alpine:3.7"
E0802 17:18:50.755482    4912 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"e2eprivatecommunity.azurecr.io/alpine:3.7\": failed to resolve reference \"e2eprivatecommunity.azurecr.io/alpine:3.7\": failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://e2eprivatecommunity.azurecr.io/oauth2/token?scope=repository%3Aalpine%3Apull&service=e2eprivatecommunity.azurecr.io: 401 Unauthorized" image="e2eprivatecommunity.azurecr.io/alpine:3.7"
E0802 17:18:50.755904    4912 kuberuntime_manager.go:1272] "Unhandled Error" err="container &Container{Name:image-pull-test,Image:e2eprivatecommunity.azurecr.io/alpine:3.7,Command:[/bin/sh -c while true; do sleep 1; done],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2fl6v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:Always,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod image-pull-teste6f5f010-1cbc-416c-a4fd-82d2361bb2de_container-runtime-2696(fb7746e7-1a03-4678-93c5-b1d0a36836c1): ErrImagePull: [rpc error: code = NotFound desc = failed to pull and unpack image \"e2eprivatecommunity.azurecr.io/alpine:3.7\": failed to resolve reference \"e2eprivatecommunity.azurecr.io/alpine:3.7\": e2eprivatecommunity.azurecr.io/alpine:3.7: not found, failed to pull and unpack image \"e2eprivatecommunity.azurecr.io/alpine:3.7\": failed to resolve reference \"e2eprivatecommunity.azurecr.io/alpine:3.7\": failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://e2eprivatecommunity.azurecr.io/oauth2/token?scope=repository%3Aalpine%3Apull&service=e2eprivatecommunity.azurecr.io: 401 Unauthorized]" logger="UnhandledError"

While we investigate, to unblock the release-informing job we will revert this.

/assign @marosset @ritikaguptams

k8s-ci-robot commented 1 month ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jsturtevant

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-sigs/windows-testing/blob/master/OWNERS)~~ [jsturtevant] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
marosset commented 1 month ago

/lgtm