Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout

[p0lyn0mial]

This repository uses the delegated authentication which has been identified to contain a bug that increases the number of watch requests against the Kube API server.

We provided a temporary branch that contains a fix and switched this repository to that branch.

With this change, k8s.io/apiserver points to temporary-watch-reduction-patch-1.21 to pick up k/k/pull/101102

Feel free to remove it once the upstream PR merges and a new Z release is cut.

Categories

• Bugfix
• [] Enhancement
• Backporting
• Others (CI, Infrastructure, Documentation)

Sample archive

• path/to/sample_data.json

Documentation

• path/to/documentation.md

Unit Tests

• path/to/file_test.go

Privacy

Yes. There are no sensitive data in the newly collected information.

Changelog

References

https://issues.redhat.com/browse/???
https://bugzilla.redhat.com/show_bug.cgi?id=???
https://access.redhat.com/solutions/???

[openshift-ci-robot]

@p0lyn0mial: This pull request references Bugzilla bug 1948311, which is valid. The bug has been updated to refer to the pull request using the external bug tracker.

3 validation(s) were run on this bug

• bug is open, matching expected state (open)
• bug target release (4.8.0) matches configured target release for branch (4.8.0)
• bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)

Requesting review from QA contact:
/cc @wangke19

In response to this:

Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[p0lyn0mial]

/cc @deads2k

[p0lyn0mial]

/retest

[tremes]

/retest

[tremes]

@p0lyn0mial Can you please link the URL to the k/k/pull/101102 ?

[tremes]

OK this one kubernetes/kubernetes#101102 right. I guess we will need to wait for k8s.io/apiserver v0.22.0 to be able to remove the temporary fix right.

[p0lyn0mial]

OK this one kubernetes/kubernetes#101102 right.

correct

I guess we will need to wait for k8s.io/apiserver v0.22.0 to be able to remove the temporary fix right.

no, for 1.21.1

[tremes]

Ohh these versions...OK :) Thanks.
/lgtm

[openshift-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: p0lyn0mial, tremes

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [tremes]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-bot]

/retest

Please review the full test history for this PR and help us cut down flakes.

[openshift-bot]

/retest

Please review the full test history for this PR and help us cut down flakes.

[openshift-ci-robot]

@p0lyn0mial: Some pull requests linked via external trackers have merged:

The following pull requests linked via external trackers have not merged:

• kubernetes/kubernetes#101022 is open

These pull request must merge or be unlinked from the Bugzilla bug in order for it to move to the next state. Once unlinked, request a bug refresh with /bugzilla refresh.

Bugzilla bug 1948311 has not been moved to the MODIFIED state.

In response to this:

Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.