openshift / origin

Conformance test suite for OpenShift
http://www.openshift.org
Apache License 2.0
8.44k stars 4.69k forks source link

ETCD-565: add manual etcd signer cert rotation e2e test #28684

Open tjungblu opened 4 weeks ago

tjungblu commented 4 weeks ago

This PR adds a suite of tests related to rotation of etcd certificates.

openshift-ci-robot commented 4 weeks ago

@tjungblu: This pull request references ETCD-565 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.16.0" version, but no target version was set.

In response to [this](https://github.com/openshift/origin/pull/28684): > Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Forigin). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
openshift-ci-robot commented 4 weeks ago

@tjungblu: This pull request references ETCD-565 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.16.0" version, but no target version was set.

In response to [this](https://github.com/openshift/origin/pull/28684): >This PR adds a suite of tests related to rotation of etcd certificates. Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Forigin). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
tjungblu commented 3 weeks ago

/test ?

openshift-ci[bot] commented 3 weeks ago

@tjungblu: The following commands are available to trigger required jobs:

The following commands are available to trigger optional jobs:

Use /test all to run the following jobs that were automatically triggered:

In response to [this](https://github.com/openshift/origin/pull/28684#issuecomment-2037004718): >/test ? Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
tjungblu commented 3 weeks ago

/test e2e-aws-disruptive /test e2e-aws-etcd-recovery

openshift-trt-bot commented 3 weeks ago

Job Failure Risk Analysis for sha: 47eef202b7733ab1abca86bcd34c627243ac5373

Job Name Failure Risk
pull-ci-openshift-origin-master-e2e-metal-ipi-ovn-ipv6 IncompleteTests
Tests for this run (100) are below the historical average (1099): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-master-e2e-aws-ovn-single-node-serial Medium
[sig-arch] events should not repeat pathologically for ns/openshift-authentication-operator
This test has passed 90.62% of 64 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.

Open Bugs
Auth operator capable of firing over 100 events in seconds on OpenShiftAPICheckFailed
tjungblu commented 2 weeks ago

/retest

openshift-trt-bot commented 2 weeks ago

Job Failure Risk Analysis for sha: 87b3bada7916590c754160f39fddc4e574b2c840

Job Name Failure Risk
pull-ci-openshift-origin-master-e2e-aws-ovn-single-node-serial High
[sig-api-machinery] disruption/cache-kube-api connection/reused should be available throughout the test
This test has passed 100.00% of 70 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
[sig-api-machinery] disruption/cache-openshift-api connection/reused should be available throughout the test
This test has passed 100.00% of 70 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
[sig-api-machinery] disruption/cache-oauth-api connection/new should be available throughout the test
This test has passed 100.00% of 70 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
[sig-api-machinery] disruption/oauth-api connection/new should be available throughout the test
This test has passed 100.00% of 70 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
Showing 4 of 12 test results
pull-ci-openshift-origin-master-e2e-metal-ipi-ovn-ipv6 IncompleteTests
Tests for this run (98) are below the historical average (745): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
soltysh commented 1 week ago

/retest

openshift-trt-bot commented 1 week ago

Job Failure Risk Analysis for sha: 5b1e7b863809d50a5f62cdfccaf4cadec5ff1873

Job Name Failure Risk
pull-ci-openshift-origin-master-e2e-aws-ovn-single-node-serial High
[sig-api-machinery] disruption/kube-api connection/reused should be available throughout the test
This test has passed 100.00% of 64 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
[sig-api-machinery] disruption/openshift-api connection/reused should be available throughout the test
This test has passed 100.00% of 64 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
[sig-api-machinery] disruption/oauth-api connection/new should be available throughout the test
This test has passed 100.00% of 64 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
[sig-api-machinery] disruption/cache-oauth-api connection/reused should be available throughout the test
This test has passed 100.00% of 64 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.
---
Showing 4 of 12 test results
pull-ci-openshift-origin-master-e2e-metal-ipi-ovn-ipv6 IncompleteTests
Tests for this run (18) are below the historical average (840): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
openshift-ci[bot] commented 3 days ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: tjungblu Once this PR has been reviewed and has the lgtm label, please assign hasbro17 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - ~~[test/extended/dr/OWNERS](https://github.com/openshift/origin/blob/master/test/extended/dr/OWNERS)~~ [tjungblu] - **[test/extended/etcd/OWNERS](https://github.com/openshift/origin/blob/master/test/extended/etcd/OWNERS)** - **[test/extended/util/annotate/generated/OWNERS](https://github.com/openshift/origin/blob/master/test/extended/util/annotate/generated/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
openshift-ci[bot] commented 2 days ago

@tjungblu: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-disruptive 47eef202b7733ab1abca86bcd34c627243ac5373 link false /test e2e-aws-disruptive
ci/prow/e2e-aws-ovn-upgrade bc71c2d79959bea1ffac25f35f6b84b61dd4f794 link false /test e2e-aws-ovn-upgrade
ci/prow/e2e-aws-ovn-single-node-serial bc71c2d79959bea1ffac25f35f6b84b61dd4f794 link false /test e2e-aws-ovn-single-node-serial
ci/prow/e2e-gcp-ovn-builds bc71c2d79959bea1ffac25f35f6b84b61dd4f794 link true /test e2e-gcp-ovn-builds
ci/prow/e2e-aws-ovn-single-node-upgrade bc71c2d79959bea1ffac25f35f6b84b61dd4f794 link false /test e2e-aws-ovn-single-node-upgrade
ci/prow/e2e-aws-ovn-single-node bc71c2d79959bea1ffac25f35f6b84b61dd4f794 link false /test e2e-aws-ovn-single-node

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
openshift-trt-bot commented 2 days ago

Job Failure Risk Analysis for sha: bc71c2d79959bea1ffac25f35f6b84b61dd4f794

Job Name Failure Risk
pull-ci-openshift-origin-master-e2e-aws-ovn-single-node-serial Medium
[sig-arch] events should not repeat pathologically for ns/openshift-etcd
This test has passed 80.85% of 47 runs on jobs ['periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial'] in the last 14 days.