Skip to content

[backport/1.24] ocsp: rotate certs of test data to fix flaky tests (#23635)/ci: use host docker gid for envoybuild (#23803)#23817

Merged
phlax merged 2 commits intoenvoyproxy:release/v1.24from
phlax:release-1.24
Nov 3, 2022
Merged

[backport/1.24] ocsp: rotate certs of test data to fix flaky tests (#23635)/ci: use host docker gid for envoybuild (#23803)#23817
phlax merged 2 commits intoenvoyproxy:release/v1.24from
phlax:release-1.24

Conversation

@phlax
Copy link
Copy Markdown
Member

@phlax phlax commented Nov 3, 2022

Signed-off-by: wbpcode wangbaiping@corp.netease.com
Signed-off-by: Ryan Northey ryan@synca.io

Commit Message:
Additional Description:
Risk Level:
Testing:
Docs Changes:
Release Notes:
Platform Specific Features:
[Optional Runtime guard:]
[Optional Fixes #Issue]
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional API Considerations:]

…oxy#23635)

Signed-off-by: wbpcode <wangbaiping@corp.netease.com>
Signed-off-by: Ryan Northey <ryan@synca.io>

Signed-off-by: code <wangbaiping@corp.netease.com>
@phlax phlax requested review from ggreenway and lizan as code owners November 3, 2022 11:12
@phlax
Copy link
Copy Markdown
Member Author

phlax commented Nov 3, 2022

cc @dio - i think this is why your backport is failing on #23751

@phlax phlax changed the title backport: ocsp: rotate certs of test data to fix flaky tests (#23635) [backport/1.24] ocsp: rotate certs of test data to fix flaky tests (#23635) Nov 3, 2022
@dio
Copy link
Copy Markdown
Member

dio commented Nov 3, 2022

Thanks, @phlax

@phlax
Copy link
Copy Markdown
Member Author

phlax commented Nov 3, 2022

looks like we need to backport #23803 first

Previously `/var/run/docker.sock` is readable/writable inside docker run because group ID of `envoygroup` coincidentally matches host docker group, while it is no longer true during rolling out new image. Fixing that by forcing `envoygroup` has host docker group ID.

Risk Level: Low
Testing: CI
Docs Changes:
Release Notes:
Platform Specific Features:

Signed-off-by: Lizan Zhou <lizan@tetrate.io>
Signed-off-by: Ryan Northey <ryan@synca.io>
@phlax phlax changed the title [backport/1.24] ocsp: rotate certs of test data to fix flaky tests (#23635) [backport/1.24] ocsp: rotate certs of test data to fix flaky tests (#23635)/ci: use host docker gid for envoybuild (#23803) Nov 3, 2022
@phlax phlax merged commit c6a0e5e into envoyproxy:release/v1.24 Nov 3, 2022
dio added a commit to dio/envoy that referenced this pull request Nov 4, 2022
…ts of test data to fix flaky tests

Cherry-picked from:

- envoyproxy#23803 (7ac5336) @lizan
- envoyproxy#23817 (051c119) @WPCode

Signed-off-by: Dhi Aurrahman <dio@rockybars.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants