Skip to content

WRKLDS-1716: test/extended/cli: Test oc create token #29895

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

tchap
Copy link
Contributor

@tchap tchap commented Jun 5, 2025

Originally I was planning to remove tests for oc serviceaccounts as I wanted to work on removing that group of deprecated subcommands, but I ended up postponing that. I still think we can merge the test change that extends the current tests to also check oc create token and remove the associated TODO notes. oc serviceaccounts calls can be removed later and the test added here kept in place.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jun 5, 2025
@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 5, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

The subcommand is being removed, so the tests are no longer needed.
oc create token is now supposed to be used, which is just forwarding to
kubectl create token, so there is nothing to test on our side.

This is needed to unblock failing tests in openshift/oc#2034

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested review from p0lyn0mial and sjenning June 5, 2025 08:55
@tchap
Copy link
Contributor Author

tchap commented Jun 9, 2025

/retest-required

@ardaguclu
Copy link
Member

oc create token is now supposed to be used, which is just forwarding to
kubectl create token, so there is nothing to test on our side.

Conceptually you are right. But there is no test that exercises this upstream functionality against OCP cluster. Yes, we know that this works on vanilla Kubernetes. But we also have to know that oc create token works on OCP. So it is better to update our test to at least simply run create token.

@tchap tchap force-pushed the migrate-oc-serviceaccounts branch from 3d19e20 to 20b26b1 Compare June 16, 2025 13:47
@tchap tchap changed the title WRKLDS-1716: test/extended/cli: Remove oc serviceaccounts tests WRKLDS-1716: test/extended/cli: Use oc create token Jun 16, 2025
@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 16, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

oc serviceaccounts subcommand is being removed, so the tests need to be aligned.

This is needed to unblock failing tests in openshift/oc#2034

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 16, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

oc serviceaccounts subcommand is deprecated, so the tests need to be aligned.

This is needed to unblock failing tests in openshift/oc#2034

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@tchap tchap changed the title WRKLDS-1716: test/extended/cli: Use oc create token WRKLDS-1716: test/extended/cli: Drop oc serviceaccounts Jun 16, 2025
Copy link

openshift-trt bot commented Jun 16, 2025

Job Failure Risk Analysis for sha: 20b26b1

Job Name Failure Risk
pull-ci-openshift-origin-main-4.12-upgrade-from-stable-4.11-e2e-aws-ovn-upgrade-rollback MissingData
pull-ci-openshift-origin-main-e2e-aws-disruptive High
[bz-Etcd] clusteroperator/etcd should not change condition/Available
This test has passed 99.90% of 5885 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-aws-ovn-etcd-scaling Low
[bz-Cloud Compute] clusteroperator/control-plane-machine-set should not change condition/Degraded
This test has passed 50.00% of 2 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:aws SecurityMode:default Topology:ha Upgrade:none] in the last week.

Open Bugs
etcd-scaling jobs failing ~60% of the time
pull-ci-openshift-origin-main-e2e-azure-ovn-etcd-scaling Medium
[bz-OLM] clusteroperator/operator-lifecycle-manager-packageserver should not change condition/Available
This test has passed 94.00% of 5885 runs on release 4.20 [Overall] in the last week.

Open Bugs
etcd-scaling jobs failing ~60% of the time
pull-ci-openshift-origin-main-e2e-gcp-csi IncompleteTests
Tests for this run (18) are below the historical average (1514): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-disruptive IncompleteTests
Tests for this run (19) are below the historical average (1275): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn IncompleteTests
Tests for this run (19) are below the historical average (1232): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)

@tchap tchap force-pushed the migrate-oc-serviceaccounts branch from 20b26b1 to b0ff92d Compare June 18, 2025 07:32
Copy link

openshift-trt bot commented Jun 18, 2025

Job Failure Risk Analysis for sha: b0ff92d

Job Name Failure Risk
pull-ci-openshift-origin-main-e2e-aws High
[sig-cli] oc adm serviceaccounts [Suite:openshift/conformance/parallel]
This test has passed 99.97% of 3179 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-aws-ovn High
[sig-cli] oc adm serviceaccounts [Suite:openshift/conformance/parallel]
This test has passed 99.97% of 3179 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-aws-ovn-cgroupsv2 High
[sig-cli] oc adm serviceaccounts [Suite:openshift/conformance/parallel]
This test has passed 99.97% of 3179 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-aws-ovn-edge-zones High
[sig-cli] oc adm serviceaccounts [Suite:openshift/conformance/parallel]
This test has passed 99.97% of 3179 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-aws-ovn-etcd-scaling Low
[bz-kube-storage-version-migrator] clusteroperator/kube-storage-version-migrator should not change condition/Available
This test has passed 74.46% of 5947 runs on release 4.20 [Overall] in the last week.

Open Bugs
[CI] e2e-openstack-ovn-etcd-scaling job permanent fails at many openshift-test tests
etcd-scaling jobs failing ~60% of the time
---
[bz-Cloud Compute] clusteroperator/control-plane-machine-set should not change condition/Degraded
This test has passed 50.00% of 2 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:aws SecurityMode:default Topology:ha Upgrade:none] in the last week.

Open Bugs
etcd-scaling jobs failing ~60% of the time
pull-ci-openshift-origin-main-e2e-aws-ovn-microshift High
[sig-cli] oc adm serviceaccounts [Suite:openshift/conformance/parallel]
This test has passed 99.97% of 3179 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-aws-proxy High
[sig-cli] oc adm serviceaccounts [Suite:openshift/conformance/parallel]
This test has passed 99.97% of 3179 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-azure-ovn-etcd-scaling Low
[bz-kube-storage-version-migrator] clusteroperator/kube-storage-version-migrator should not change condition/Available
This test has passed 0.00% of 1 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:azure SecurityMode:default Topology:ha Upgrade:none] in the last week.

Open Bugs
[CI] e2e-openstack-ovn-etcd-scaling job permanent fails at many openshift-test tests
etcd-scaling jobs failing ~60% of the time
---
[bz-Cloud Compute] clusteroperator/control-plane-machine-set should not change condition/Degraded
This test has passed 0.00% of 1 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:azure SecurityMode:default Topology:ha Upgrade:none] in the last week.

Open Bugs
etcd-scaling jobs failing ~60% of the time
pull-ci-openshift-origin-main-e2e-gcp-csi IncompleteTests
Tests for this run (19) are below the historical average (1147): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-disruptive IncompleteTests
Tests for this run (19) are below the historical average (956): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-fips-serial-1of2 IncompleteTests
Tests for this run (19) are below the historical average (1184): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-fips-serial-2of2 IncompleteTests
Tests for this run (18) are below the historical average (1208): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn IncompleteTests
Tests for this run (19) are below the historical average (1604): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn-etcd-scaling IncompleteTests
Tests for this run (19) are below the historical average (1129): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn-rt-upgrade IncompleteTests
Tests for this run (18) are below the historical average (1084): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn-upgrade IncompleteTests
Tests for this run (19) are below the historical average (935): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-vsphere-ovn-etcd-scaling Medium
[sig-instrumentation] disruption/metrics-api connection/new should be available throughout the test
Potential external regression detected for High Risk Test analysis

@tchap tchap force-pushed the migrate-oc-serviceaccounts branch 4 times, most recently from 7bb4152 to 1d148d6 Compare June 18, 2025 19:35
Copy link

openshift-trt bot commented Jun 19, 2025

Job Failure Risk Analysis for sha: 1d148d6

Job Name Failure Risk
pull-ci-openshift-origin-main-e2e-aws-ovn-etcd-scaling Low
[bz-Cloud Compute] clusteroperator/control-plane-machine-set should not change condition/Degraded
This test has passed 50.00% of 2 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:aws SecurityMode:default Topology:ha Upgrade:none] in the last week.

Open Bugs
etcd-scaling jobs failing ~60% of the time
pull-ci-openshift-origin-main-e2e-gcp-csi IncompleteTests
Tests for this run (19) are below the historical average (903): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-disruptive IncompleteTests
Tests for this run (19) are below the historical average (754): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-fips-serial-1of2 IncompleteTests
Tests for this run (19) are below the historical average (950): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-fips-serial-2of2 IncompleteTests
Tests for this run (18) are below the historical average (975): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn IncompleteTests
Tests for this run (18) are below the historical average (1709): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn-etcd-scaling IncompleteTests
Tests for this run (18) are below the historical average (900): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn-rt-upgrade IncompleteTests
Tests for this run (18) are below the historical average (825): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)
pull-ci-openshift-origin-main-e2e-gcp-ovn-upgrade IncompleteTests
Tests for this run (19) are below the historical average (883): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)

The test is extended with checking the service account token
as returned by oc create token.
@tchap tchap force-pushed the migrate-oc-serviceaccounts branch from 1d148d6 to de85e74 Compare June 19, 2025 08:34
@tchap tchap changed the title WRKLDS-1716: test/extended/cli: Drop oc serviceaccounts WRKLDS-1716: test/extended/cli: Extend serviceaccounts test Jun 19, 2025
@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 19, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

This change is in preparation for removing oc serviceaccounts.

Related to openshift/oc#2034

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@tchap
Copy link
Contributor Author

tchap commented Jun 19, 2025

/retest-required

@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 30, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

Extend tests related to oc serviceaccounts.
Originally I was planning to remove tests for oc serviceaccounts as I wanted to work on removing that group of deprecated subcommands, but I ended up postponing that. I still think we can merge the test change that extends the current tests to also check oc create token.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 30, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

Originally I was planning to remove tests for oc serviceaccounts as I wanted to work on removing that group of deprecated subcommands, but I ended up postponing that. I still think we can merge the test change that extends the current tests to also check oc create token and remove the associated TODO notes.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

openshift-ci-robot commented Jun 30, 2025

@tchap: This pull request references WRKLDS-1716 which is a valid jira issue.

In response to this:

Originally I was planning to remove tests for oc serviceaccounts as I wanted to work on removing that group of deprecated subcommands, but I ended up postponing that. I still think we can merge the test change that extends the current tests to also check oc create token and remove the associated TODO notes. oc serviceaccounts calls can be removed later and the test added here kept in place.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@tchap tchap changed the title WRKLDS-1716: test/extended/cli: Extend serviceaccounts test WRKLDS-1716: test/extended/cli: Test oc create token Jun 30, 2025
@ardaguclu
Copy link
Member

/lgtm
from workloads team

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Jun 30, 2025
@neisw
Copy link
Contributor

neisw commented Jul 1, 2025

/approve

Copy link
Contributor

openshift-ci bot commented Jul 1, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ardaguclu, neisw, tchap

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 1, 2025
@tchap
Copy link
Contributor Author

tchap commented Jul 1, 2025

/retest

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 5be1d97 and 2 for PR HEAD de85e74 in total

@tchap
Copy link
Contributor Author

tchap commented Jul 2, 2025

/retest-required

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD cec6222 and 1 for PR HEAD de85e74 in total

@tchap
Copy link
Contributor Author

tchap commented Jul 3, 2025

/test e2e-aws-ovn-edge-zones

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 205e55d and 2 for PR HEAD de85e74 in total

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD fc0fc37 and 2 for PR HEAD de85e74 in total

Copy link
Contributor

openshift-ci bot commented Jul 4, 2025

@tchap: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/4.12-upgrade-from-stable-4.11-e2e-aws-ovn-upgrade-rollback 20b26b1 link false /test 4.12-upgrade-from-stable-4.11-e2e-aws-ovn-upgrade-rollback
ci/prow/e2e-openstack-ovn de85e74 link false /test e2e-openstack-ovn
ci/prow/e2e-gcp-fips-serial-1of2 de85e74 link false /test e2e-gcp-fips-serial-1of2
ci/prow/e2e-gcp-fips-serial-2of2 de85e74 link false /test e2e-gcp-fips-serial-2of2
ci/prow/e2e-gcp-disruptive de85e74 link false /test e2e-gcp-disruptive
ci/prow/okd-e2e-gcp de85e74 link false /test okd-e2e-gcp
ci/prow/e2e-azure-ovn-upgrade de85e74 link false /test e2e-azure-ovn-upgrade
ci/prow/e2e-aws-ovn-etcd-scaling de85e74 link false /test e2e-aws-ovn-etcd-scaling
ci/prow/e2e-vsphere-ovn-etcd-scaling de85e74 link false /test e2e-vsphere-ovn-etcd-scaling
ci/prow/e2e-gcp-ovn-etcd-scaling de85e74 link false /test e2e-gcp-ovn-etcd-scaling
ci/prow/e2e-aws-ovn-single-node-upgrade de85e74 link false /test e2e-aws-ovn-single-node-upgrade
ci/prow/e2e-aws-disruptive de85e74 link false /test e2e-aws-disruptive
ci/prow/e2e-aws-ovn-serial-publicnet-1of2 de85e74 link false /test e2e-aws-ovn-serial-publicnet-1of2
ci/prow/e2e-vsphere-ovn-dualstack-primaryv6 de85e74 link false /test e2e-vsphere-ovn-dualstack-primaryv6
ci/prow/e2e-azure-ovn-etcd-scaling de85e74 link false /test e2e-azure-ovn-etcd-scaling

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Copy link

openshift-trt bot commented Jul 4, 2025

Job Failure Risk Analysis for sha: de85e74

Job Name Failure Risk
pull-ci-openshift-origin-main-e2e-aws-ovn-etcd-scaling Low
[bz-kube-storage-version-migrator] clusteroperator/kube-storage-version-migrator should not change condition/Available
This test has passed 69.83% of 5440 runs on release 4.20 [Overall] in the last week.

Open Bugs
[CI] e2e-openstack-ovn-etcd-scaling job permanent fails at many openshift-test tests
---
[bz-Cloud Compute] clusteroperator/control-plane-machine-set should not change condition/Degraded
This test has passed 50.00% of 2 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:aws SecurityMode:default Topology:ha Upgrade:none] in the last week.
pull-ci-openshift-origin-main-e2e-azure-ovn-etcd-scaling Low
[bz-Cloud Compute] clusteroperator/control-plane-machine-set should not change condition/Degraded
This test has passed 0.00% of 1 runs on release 4.20 [Architecture:amd64 FeatureSet:default Installer:ipi JobTier:rare Network:ovn NetworkStack:ipv4 Owner:eng Platform:azure SecurityMode:default Topology:ha Upgrade:none] in the last week.
pull-ci-openshift-origin-main-e2e-azure-ovn-upgrade Medium
Job run should complete before timeout
This test has passed 96.68% of 4305 runs on release 4.20 [Overall] in the last week.
pull-ci-openshift-origin-main-e2e-gcp-disruptive IncompleteTests
Tests for this run (104) are below the historical average (739): IncompleteTests (not enough tests ran to make a reasonable risk analysis; this could be due to infra, installation, or upgrade problems)

@tchap
Copy link
Contributor Author

tchap commented Jul 4, 2025

/test e2e-metal-ipi-ovn-ipv6

@openshift-merge-bot openshift-merge-bot bot merged commit a2a0ef9 into openshift:main Jul 4, 2025
44 of 58 checks passed
@openshift-bot
Copy link
Contributor

[ART PR BUILD NOTIFIER]

Distgit: openshift-enterprise-tests
This PR has been included in build openshift-enterprise-tests-container-v4.20.0-202507041243.p0.ga2a0ef9.assembly.stream.el9.
All builds following this will include this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants