Skip to content

CI: RuntimeKafka Kafka Policy Role Egress #19950

@maintainer-s-little-helper

Description

@maintainer-s-little-helper

Test Name

RuntimeKafka Kafka Policy Role Egress

Failure Output

FAIL: Traffic in disallowTopic is allowed

Stacktrace

Click to show.
/home/jenkins/workspace/Cilium-PR-Runtime-net-next/runtime-gopath/src/github.com/cilium/cilium/test/ginkgo-ext/scopes.go:527
Traffic in disallowTopic is allowed
Expected
    <*errors.errorString | 0xc00353cc20>: {
        s: "{disallowTopic=TOPIC_AUTHORIZATION_FAILED} is not in the output after timeout: 4m0s timeout expired",
    }
to be nil
/home/jenkins/workspace/Cilium-PR-Runtime-net-next/runtime-gopath/src/github.com/cilium/cilium/test/runtime/kafka.go:215

Standard Output

Click to show.
Number of "context deadline exceeded" in logs: 0
Number of "level=error" in logs: 0
Number of "level=warning" in logs: 0
Number of "Cilium API handler panicked" in logs: 0
Number of "Goroutine took lock for more than" in logs: 0
No errors/warnings found in logs


Standard Error

Click to show.
02:30:36 STEP: Setting up policy: /home/vagrant/go/src/github.com/cilium/cilium/test/runtime/manifests/Policies-kafka-Role.json
02:30:37 STEP: Sending produce request on kafka topic `allowedTopic`
02:30:51 STEP: Sending consume request on kafka topic `allowedTopic`
02:30:52 STEP: Non-allowed topic
FAIL: Traffic in disallowTopic is allowed
Expected
    <*errors.errorString | 0xc00353cc20>: {
        s: "{disallowTopic=TOPIC_AUTHORIZATION_FAILED} is not in the output after timeout: 4m0s timeout expired",
    }
to be nil
=== Test Finished at 2022-05-24T02:34:52Z====
02:34:52 STEP: Running JustAfterEach block for EntireTestsuite RuntimeKafka
===================== TEST FAILED =====================
02:34:52 STEP: Running AfterFailed block for EntireTestsuite RuntimeKafka
cmd: sudo cilium endpoint list
Exitcode: 0 
Stdout:
 	 ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY   LABELS (source:key[=value])                                                       IPv6                 IPv4            STATUS   
	            ENFORCEMENT        ENFORCEMENT                                                                                                                                         
	 590        Disabled           Disabled          4          reserved:health                                                                   f00d::a0f:0:0:8434   10.15.141.245   ready   
	 1107       Disabled           Disabled          60561      container:id.kafka                                                                f00d::a0f:0:0:5ed8   10.15.48.21     ready   
	                                                            container:maintainer=wurstmeister                                                                                              
	                                                            container:org.label-schema.build-date=2021-12-30T09:16:40Z                                                                     
	                                                            container:org.label-schema.description=Apache Kafka                                                                            
	                                                            container:org.label-schema.name=kafka                                                                                          
	                                                            container:org.label-schema.schema-version=1.0                                                                                  
	                                                            container:org.label-schema.vcs-ref=c4e8f17fc9bbfe713b31bd9969babbb59523147b                                                    
	                                                            container:org.label-schema.vcs-url=https://github.com/wurstmeister/kafka-docker                                                
	                                                            container:org.label-schema.version=2.11_0.11.0.3                                                                               
	 1379       Disabled           Disabled          56476      container:id.client                                                               f00d::a0f:0:0:c558   10.15.36.115    ready   
	 1819       Disabled           Disabled          1          reserved:host                                                                                                          ready   
	 3506       Disabled           Disabled          15807      container:id.zook                                                                 f00d::a0f:0:0:74e2   10.15.84.54     ready   
	                                                            container:name=zookeeper                                                                                                       
	                                                            container:version=3.4.10                                                                                                       
	 
Stderr:
 	 

cmd: sudo cilium policy get
Exitcode: 0 
Stdout:
 	 []
	 Revision: 1
	 
Stderr:
 	 

===================== Exiting AfterFailed =====================
02:34:57 STEP: Running AfterEach for block EntireTestsuite RuntimeKafka
02:34:57 STEP: Running AfterEach for block EntireTestsuite

[[ATTACHMENT|2d72afc1_RuntimeKafka_Kafka_Policy_Role_Egress.zip]]
02:34:58 STEP: Running AfterAll block for EntireTestsuite RuntimeKafka


ZIP Links:

Click to show.

https://jenkins.cilium.io/job/Cilium-PR-Runtime-net-next//2360/artifact/2d72afc1_RuntimeKafka_Kafka_Policy_Role_Egress.zip
https://jenkins.cilium.io/job/Cilium-PR-Runtime-net-next//2360/artifact/test_results_Cilium-PR-Runtime-net-next_2360_BDD-Test-PR.zip

Jenkins URL: https://jenkins.cilium.io/job/Cilium-PR-Runtime-net-next/2360/

If this is a duplicate of an existing flake, comment 'Duplicate of #<issue-number>' and close this issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    ci/flakeThis is a known failure that occurs in the tree. Please investigate me!staleThe stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions