Skip to content

Test cert rotation on azure#65086

Merged
openshift-merge-bot[bot] merged 1 commit intoopenshift:masterfrom
vrutkovs:cert-rotation-azure
Jul 2, 2025
Merged

Test cert rotation on azure#65086
openshift-merge-bot[bot] merged 1 commit intoopenshift:masterfrom
vrutkovs:cert-rotation-azure

Conversation

@vrutkovs
Copy link
Copy Markdown
Contributor

@vrutkovs vrutkovs commented May 19, 2025

No description provided.

@openshift-ci openshift-ci Bot requested review from deads2k and smg247 May 19, 2025 13:09
@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 19, 2025
@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from 094ffe8 to be3553d Compare May 19, 2025 13:11
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 19, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure4

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 19, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from be3553d to 50ec7ee Compare May 20, 2025 07:46
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 20, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure4

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 20, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 20, 2025

@vrutkovs: job(s): pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure4 either don't exist or were not found to be affected, and cannot be rehearsed

@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 20, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure4

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 20, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 20, 2025

@vrutkovs: job(s): pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure4 either don't exist or were not found to be affected, and cannot be rehearsed

@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 20, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 20, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from 50ec7ee to a5a6374 Compare May 20, 2025 10:44
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 20, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 20, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch 2 times, most recently from e8cf3e6 to c67cd47 Compare May 26, 2025 07:24
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 26, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 26, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from c67cd47 to 436f464 Compare May 26, 2025 10:31
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 26, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 26, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from 436f464 to 4eb561b Compare May 26, 2025 10:39
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 26, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 26, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented May 26, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented May 26, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented Jun 30, 2025

/pj-rehearse pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-aws

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Jun 30, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Jun 30, 2025

@vrutkovs: job(s): pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-aws either don't exist or were not found to be affected, and cannot be rehearsed

@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented Jun 30, 2025

Certs issued are too short for azure:

I0630 14:12:44.890592   11182 csi_plugin.go:887] Failed to contact API server when waiting for CSINode publishing: Get "https://api-int.ci-op-yt4c28dk-5f9ba.ci.azure.devcluster.openshift.com:6443/apis/storage.k8s.io/v1/csinodes/ci-op-yt4c28dk-5f9ba-gpvvz-worker-westus-84wvf?resourceVersion=0": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2025-06-30T14:12:44Z is after 2025-06-30T14:12:36Z

We'll need to fix this in installer

@gangwgr
Copy link
Copy Markdown
Contributor

gangwgr commented Jul 1, 2025

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 1, 2025
@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from 0dbd28e to e2f3f0f Compare July 1, 2025 09:29
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented Jul 1, 2025

/pj-rehearse

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Jul 1, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 1, 2025
@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from e2f3f0f to 0dbd28e Compare July 1, 2025 10:28
@openshift-merge-robot openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jul 1, 2025
@openshift-ci-robot openshift-ci-robot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jul 1, 2025
@vrutkovs vrutkovs force-pushed the cert-rotation-azure branch from 0dbd28e to db7bc60 Compare July 1, 2025 10:41
@openshift-merge-robot openshift-merge-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jul 1, 2025
@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Jul 1, 2025

[REHEARSALNOTIFIER]
@vrutkovs: the pj-rehearse plugin accommodates running rehearsal tests for the changes in this PR. Expand 'Interacting with pj-rehearse' for usage details. The following rehearsable tests have been affected by this change:

Test name Repo Type Reason
pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation-azure openshift/cluster-kube-apiserver-operator presubmit Presubmit changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.20-e2e-short-cert-rotation openshift/cluster-kube-apiserver-operator presubmit Ci-operator config changed
pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-short-cert-rotation openshift/cluster-kube-apiserver-operator presubmit Ci-operator config changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.21-e2e-short-cert-rotation openshift/cluster-kube-apiserver-operator presubmit Ci-operator config changed
pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-main-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.21-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.21-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.21-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.20-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.20-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.20-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.19-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.19-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.19-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.18-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.18-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.18-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.17-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.17-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.17-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.16-e2e-metal-ovn-ha-cert-rotation-shutdown-90d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.16-e2e-metal-ovn-ha-cert-rotation-shutdown-180d openshift/cluster-kube-apiserver-operator presubmit Registry content changed
pull-ci-openshift-cluster-kube-apiserver-operator-release-4.16-e2e-metal-ovn-ha-cert-rotation-shutdown-360d openshift/cluster-kube-apiserver-operator presubmit Registry content changed

A total of 304 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs.

A full list of affected jobs can be found here

Interacting with pj-rehearse

Comment: /pj-rehearse to run up to 5 rehearsals
Comment: /pj-rehearse skip to opt-out of rehearsals
Comment: /pj-rehearse {test-name}, with each test separated by a space, to run one or more specific rehearsals
Comment: /pj-rehearse more to run up to 10 rehearsals
Comment: /pj-rehearse max to run up to 25 rehearsals
Comment: /pj-rehearse auto-ack to run up to 5 rehearsals, and add the rehearsals-ack label on success
Comment: /pj-rehearse list to get an up-to-date list of affected jobs
Comment: /pj-rehearse abort to abort all active rehearsals
Comment: /pj-rehearse network-access-allowed to allow rehearsals of tests that have the restrict_network_access field set to false. This must be executed by an openshift org member who is not the PR author

Once you are satisfied with the results of the rehearsals, comment: /pj-rehearse ack to unblock merge. When the rehearsals-ack label is present on your PR, merge will no longer be blocked by rehearsals.
If you would like the rehearsals-ack label removed, comment: /pj-rehearse reject to re-block merging.

@openshift-ci-robot openshift-ci-robot removed the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jul 1, 2025
@gangwgr
Copy link
Copy Markdown
Contributor

gangwgr commented Jul 1, 2025

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 1, 2025
@xingxingxia
Copy link
Copy Markdown
Contributor

xingxingxia commented Jul 1, 2025

/approve

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Jul 1, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: gangwgr, vrutkovs, xingxingxia

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 1, 2025
@vrutkovs
Copy link
Copy Markdown
Contributor Author

vrutkovs commented Jul 2, 2025

/pj-rehearse ack

@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Jul 2, 2025

@vrutkovs: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel.

@openshift-ci-robot openshift-ci-robot added the rehearsals-ack Signifies that rehearsal jobs have been acknowledged label Jul 2, 2025
@openshift-merge-bot openshift-merge-bot Bot merged commit a5aedb4 into openshift:master Jul 2, 2025
17 checks passed
MrSanketkumar pushed a commit to MrSanketkumar/release that referenced this pull request Aug 1, 2025
@MrSanketkumar
Test cert rotation on azure (openshift#65086)
8a85bba
liweinan pushed a commit to liweinan/release that referenced this pull request Aug 5, 2025
@liweinan
Test cert rotation on azure (openshift#65086)
9cddfbf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@deads2k deads2k Awaiting requested review from deads2k

@smg247 smg247 Awaiting requested review from smg247

Assignees

@gangwgr gangwgr

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. rehearsals-ack Signifies that rehearsal jobs have been acknowledged

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@vrutkovs @openshift-ci-robot @gangwgr @xingxingxia @openshift-merge-robot