Skip to content

Conversation

@jacobsee
Copy link
Member

@jacobsee jacobsee commented Aug 12, 2025

If we encounter an OIDC server which is not properly responding using JSON, we should occasionally retry pinging it for the purpose of checking password grant support rather than assuming that it doesn't support password grant forever.

Now: Reject and don't cache 5xx errors outright while checking for password grant support.

@openshift-ci-robot openshift-ci-robot added jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Aug 12, 2025
@openshift-ci-robot
Copy link
Contributor

@jacobsee: This pull request references Jira Issue OCPBUGS-59909, which is invalid:

  • expected the bug to target the "4.20.0" version, but no target version was set

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

In response to this:

If we encounter an OIDC server which is not properly responding using JSON, we should occasionally retry pinging it for the purpose of checking password grant support rather than assuming that it doesn't support password grant forever.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested review from ibihim and liouk August 12, 2025 18:04
@jacobsee
Copy link
Member Author

/retest-required

1 similar comment
@jacobsee
Copy link
Member Author

/retest-required

Copy link
Member

@liouk liouk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A couple of comments on the commit structure:

  • we don't need the new caching mechanism, so no point in adding it and then removing it in separate commits; can you please drop those and keep only the commit for the 5xx?
  • please don't prefix commits with the jira; we have this info in the PR. Use a component prefix instead, i.e. configobservation/oauth:

}
defer resp.Body.Close()

if resp.StatusCode >= 500 && resp.StatusCode < 600 {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: 600 reads weird in http 😅 Would you mind using <=599 instead?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure thing 😄

@jacobsee jacobsee force-pushed the OCPBUGS-59909/dont-cache-non-decodable-oidc-forever branch from eb4fa5c to d0e360b Compare August 15, 2025 21:04
@jacobsee jacobsee changed the title OCPBUGS-59909: retry password grant check on failed JSON decode OCPBUGS-59909: Don't cache server errors when checking for password grant support Aug 15, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 16, 2025

@jacobsee: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/test-operator-integration d0e360b link false /test test-operator-integration
ci/prow/e2e-aws-single-node d0e360b link false /test e2e-aws-single-node
ci/prow/okd-scos-e2e-aws-ovn d0e360b link false /test okd-scos-e2e-aws-ovn

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@liouk
Copy link
Member

liouk commented Aug 18, 2025

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Aug 18, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 18, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jacobsee, liouk

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 18, 2025
@jacobsee
Copy link
Member Author

/retest-required

@jacobsee
Copy link
Member Author

/jira refresh

@openshift-ci-robot
Copy link
Contributor

@jacobsee: This pull request references Jira Issue OCPBUGS-59909, which is invalid:

  • expected the bug to target the "4.20.0" version, but no target version was set

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@jacobsee
Copy link
Member Author

/jira refresh

@openshift-ci-robot openshift-ci-robot added jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. and removed jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Aug 19, 2025
@openshift-ci-robot
Copy link
Contributor

@jacobsee: This pull request references Jira Issue OCPBUGS-59909, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (4.20.0) matches configured target version for branch (4.20.0)
  • bug is in the state New, which is one of the valid states (NEW, ASSIGNED, POST)

Requesting review from QA contact:
/cc @xingxingxia

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested a review from xingxingxia August 19, 2025 20:40
@openshift-merge-bot openshift-merge-bot bot merged commit b0bfaf3 into openshift:master Aug 19, 2025
12 of 15 checks passed
@openshift-ci-robot
Copy link
Contributor

@jacobsee: Jira Issue OCPBUGS-59909: All pull requests linked via external trackers have merged:

Jira Issue OCPBUGS-59909 has been moved to the MODIFIED state.

In response to this:

If we encounter an OIDC server which is not properly responding using JSON, we should occasionally retry pinging it for the purpose of checking password grant support rather than assuming that it doesn't support password grant forever.

Now: Reject and don't cache 5xx errors outright while checking for password grant support.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-bot
Copy link
Contributor

[ART PR BUILD NOTIFIER]

Distgit: ose-cluster-authentication-operator
This PR has been included in build ose-cluster-authentication-operator-container-v4.20.0-202508192316.p0.gb0bfaf3.assembly.stream.el9.
All builds following this will include this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants