kubernetes-sigs/aws-iam-authenticator PR #552 pull-aws-iam-authenticator-e2e #1620984746102231040
Recent runs || View in Spyglass
Recent runs || View in Spyglass
| PR | tingrui-AWS-EKS-auth: Expose Principal Id to audit log |
| Result | FAILURE |
| Tests | 0 failed / 0 succeeded |
| Started | |
| Elapsed | 16m51s |
| Revision | 2de61a8a23b68b76d073f4aca1e4be0498eeda3d |
| Refs |
552 |
... skipping 376 lines ... #17 exporting to image #17 exporting layers #17 exporting layers 0.3s done #17 writing image sha256:72211e57595f60bbcee8b2854feeb94a29d97da3448a68d15027361cf74ce01d done #17 naming to docker.io/library/aws-iam-authenticator:_6b3e9cc07058e2903958dc48ff24cd1a6a40a7fe_20230202T031838Z done #17 DONE 0.3s WARNING: failed to get git remote url: fatal: No remote configured to list refs from. make[1]: Leaving directory '/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator' "aws-iam-authenticator" The push refers to repository [607362164682.dkr.ecr.us-west-2.amazonaws.com/aws-iam-authenticator] 1e613ca8c411: Preparing 0f0cbe4c9a64: Preparing 7b8490e4d3b4: Preparing ... skipping 47 lines ... go build \ -o=/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/_output/bin/aws-iam-authenticator \ -ldflags="-w -s -X sigs.k8s.io/aws-iam-authenticator/pkg.Version= -X sigs.k8s.io/aws-iam-authenticator/pkg.BuildDate=2023-02-02T03:22:46Z -X sigs.k8s.io/aws-iam-authenticator/pkg.CommitID=6b3e9cc07058e2903958dc48ff24cd1a6a40a7fe" \ ./cmd/aws-iam-authenticator/ make[2]: Leaving directory '/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator' make[1]: Leaving directory '/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator' Error: cluster not found "test-cluster-32435.k8s.local" ### ## Setting up roles # ### ## aws-iam-authenticator-test-role-KubernetesAdmin role already exists # ... skipping 19 lines ... |.o ++. oS.+ | |+.+o+o. .. | |oo oo.... | |. . | | | +----[SHA256]-----+ Error: cluster not found "test-cluster-32435.k8s.local" ### ## Creating cluster test-cluster-32435.k8s.local with /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/test-cluster-32435.k8s.local.json (dry run) # I0202 03:22:53.824970 17786 new_cluster.go:248] Inferred "aws" cloud provider from zone "us-west-2a" I0202 03:22:53.825145 17786 new_cluster.go:1102] Cloud Provider ID = aws I0202 03:22:54.144334 17786 subnets.go:182] Assigned CIDR 172.20.32.0/19 to subnet us-west-2a ... skipping 79 lines ... Unable to connect to the server: dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host Unable to connect to the server: dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host Unable to connect to the server: dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host Unable to connect to the server: dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host Unable to connect to the server: dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host Unable to connect to the server: dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host error: Get "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/api?timeout=32s": dial tcp: lookup api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com on 10.63.240.10:53: no such host - error from a previous attempt: EOF Unable to connect to the server: EOF Unable to connect to the server: EOF ### ## Cluster is up! # ### ... skipping 44 lines ... ip-172-20-80-225.us-west-2.compute.internal node True VALIDATION ERRORS KIND NAME MESSAGE Pod kube-system/aws-iam-authenticator-h28gj system-node-critical pod "aws-iam-authenticator-h28gj" is pending Validation Failed W0202 03:29:03.568162 18306 validate_cluster.go:232] (will retry): cluster not yet healthy INSTANCE GROUPS NAME ROLE MACHINETYPE MIN MAX SUBNETS master-us-west-2a Master t3.medium 1 1 us-west-2a nodes-us-west-2a Node c5.large 1 1 us-west-2a nodes-us-west-2b Node c5.large 1 1 us-west-2b ... skipping 49 lines ... [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/apiserver_test.go:88[0m [38;5;243m------------------------------[0m [38;5;10m•[0mcould not get token: AccessDenied: User: arn:aws:iam::607362164682:user/awstester is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::607362164682:role/aws-iam-authenticator-test-role-KubernetesAdmin status code: 403, request id: f045cc19-5af6-4dfc-97ff-549edb049282 [38;5;243m------------------------------[0m [38;5;9m• [FAILED] [0.225 seconds][0m [iam-auth-e2e] a kubernetes client [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:37[0m when assuming the KubernetesAdmin role [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:62[0m [38;5;9m[1m[It] should send requests successfully[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:79[0m [38;5;9mUnexpected error: <*url.Error | 0xc0006f2090>: { Op: "Get", URL: "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/api/v1/namespaces/kube-system/pods", Err: <*errors.errorString | 0xc00012c080>{ s: "getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1", }, } Get "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/api/v1/namespaces/kube-system/pods": getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1 occurred[0m [38;5;9mIn [1m[It][0m[38;5;9m at: [1m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:84[0m [38;5;243m------------------------------[0m could not get token: AccessDenied: User: arn:aws:iam::607362164682:user/awstester is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::607362164682:role/aws-iam-authenticator-test-role-KubernetesAdmin status code: 403, request id: 94c7051b-7722-4b39-a02c-2c5b5dc27c51 [38;5;9m• [FAILED] [0.262 seconds][0m [iam-auth-e2e] a kubernetes client [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:37[0m when assuming the KubernetesAdmin role [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:62[0m [38;5;9m[1m[It] should be authorized to do everything[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:87[0m [38;5;9mUnexpected error: <*url.Error | 0xc0001112f0>: { Op: "Post", URL: "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/apis/authorization.k8s.io/v1/selfsubjectaccessreviews", Err: <*errors.errorString | 0xc000346c90>{ s: "getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1", }, } Post "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/apis/authorization.k8s.io/v1/selfsubjectaccessreviews": getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1 occurred[0m [38;5;9mIn [1m[It][0m[38;5;9m at: [1m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:103[0m [38;5;243m------------------------------[0m could not get token: AccessDenied: User: arn:aws:iam::607362164682:user/awstester is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::607362164682:role/aws-iam-authenticator-test-role-KubernetesUsers status code: 403, request id: 94e6c254-c71d-4dce-9239-b4175b915569 [38;5;9m• [FAILED] [0.211 seconds][0m [iam-auth-e2e] a kubernetes client [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:37[0m when assuming the KubernetesUsers role [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:108[0m [38;5;9m[1m[It] should send a request successfully[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:125[0m [38;5;9mUnexpected error: <*url.Error | 0xc000814cc0>: { Op: "Get", URL: "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/api/v1/namespaces/kube-system/pods", Err: <*errors.errorString | 0xc00013f1c0>{ s: "getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1", }, } Get "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/api/v1/namespaces/kube-system/pods": getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1 occurred[0m [38;5;9mIn [1m[It][0m[38;5;9m at: [1m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:132[0m [38;5;243m------------------------------[0m could not get token: AccessDenied: User: arn:aws:iam::607362164682:user/awstester is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::607362164682:role/aws-iam-authenticator-test-role-KubernetesUsers status code: 403, request id: 025191a4-f759-4738-b938-95193cda0c1e [38;5;9m• [FAILED] [0.233 seconds][0m [iam-auth-e2e] a kubernetes client [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:37[0m when assuming the KubernetesUsers role [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:108[0m [38;5;9m[1m[It] should be mapped to the right permissions[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:135[0m [38;5;9mUnexpected error: <*url.Error | 0xc000521b30>: { Op: "Post", URL: "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/apis/authorization.k8s.io/v1/selfsubjectaccessreviews", Err: <*errors.errorString | 0xc000206730>{ s: "getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1", }, } Post "https://api-test-cluster-32435-k8-7t63rq-1654827204.us-west-2.elb.amazonaws.com/apis/authorization.k8s.io/v1/selfsubjectaccessreviews": getting credentials: exec: executable /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/hack/e2e/e2e-test-artifacts/bin/aws-iam-authenticator failed with exit code 1 occurred[0m [38;5;9mIn [1m[It][0m[38;5;9m at: [1m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:152[0m [38;5;243m------------------------------[0m [38;5;10m•[0m[38;5;10m•[0m [38;5;9m[1mSummarizing 4 Failures:[0m [38;5;9m[FAIL][0m [0m[iam-auth-e2e] a kubernetes client [38;5;243mwhen assuming the KubernetesAdmin role [0m[38;5;9m[1m[It] should send requests successfully[0m[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:84[0m [38;5;9m[FAIL][0m [0m[iam-auth-e2e] a kubernetes client [38;5;243mwhen assuming the KubernetesAdmin role [0m[38;5;9m[1m[It] should be authorized to do everything[0m[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:103[0m [38;5;9m[FAIL][0m [0m[iam-auth-e2e] a kubernetes client [38;5;243mwhen assuming the KubernetesUsers role [0m[38;5;9m[1m[It] should send a request successfully[0m[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:132[0m [38;5;9m[FAIL][0m [0m[iam-auth-e2e] a kubernetes client [38;5;243mwhen assuming the KubernetesUsers role [0m[38;5;9m[1m[It] should be mapped to the right permissions[0m[0m [38;5;243m/home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator/tests/e2e/tests.go:152[0m [38;5;9m[1mRan 8 of 8 Specs in 72.861 seconds[0m [38;5;9m[1mFAIL![0m -- [38;5;10m[1m4 Passed[0m | [38;5;9m[1m4 Failed[0m | [38;5;11m[1m0 Pending[0m | [38;5;14m[1m0 Skipped[0m [38;5;228mYou're using deprecated Ginkgo functionality:[0m [38;5;228m=============================================[0m [38;5;11mSupport for custom reporters has been removed in V2. Please read the documentation linked to below for Ginkgo's new behavior and for a migration path:[0m [1mLearn more at:[0m [38;5;14m[4mhttps://onsi.github.io/ginkgo/MIGRATING_TO_V2#removed-custom-reporters[0m [38;5;243mTo silence deprecations that can be silenced set the following environment variable:[0m [38;5;243mACK_GINKGO_DEPRECATIONS=2.4.0[0m --- FAIL: TestE2E (72.86s) FAIL Ginkgo ran 1 suite in 1m38.347123766s Test Suite Failed + TEST_PASSED=1 + popd /home/prow/go/src/github.com/kubernetes-sigs/aws-iam-authenticator + set -e + set +x ### ... skipping 426 lines ... vpc:vpc-03ddf48d9b9575746 ok dhcp-options:dopt-01b399f50214789b1 ok Deleted kubectl config for test-cluster-32435.k8s.local Deleted cluster: "test-cluster-32435.k8s.local" An error occurred (NoSuchEntity) when calling the DeleteRole operation: The role with name aws-iam-authenticator-test-role-KubernetesAdmin cannot be found. make: *** [Makefile:110: e2e] Error 255 + EXIT_VALUE=2 + set +o xtrace Cleaning up after docker in docker. ================================================================================ Cleaning up after docker Stopping Docker: dockerProgram process in pidfile '/var/run/docker-ssd.pid', 1 process(es), refused to die. ... skipping 3 lines ...