<p dir="auto"><a href="https://storage.googleapis.com/kubernetes-jenkins/logs/kubernetes-e2e-gke/8201/" rel="nofollow">https://storage.googleapis.com/kubernetes-jenkins/logs/kubernetes-e2e-gke/8201/</a></p>
<p dir="auto">Multiple broken tests:</p>
<p dir="auto">Failed: [k8s.io] ServiceAccounts should ensure a single API token exists {Kubernetes e2e suite}</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/service_accounts.go:153
Expected error:
    &lt;*errors.StatusError | 0xc820aafa80&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: &quot;&quot;, APIVersion: &quot;&quot;},
            ListMeta: {SelfLink: &quot;&quot;, ResourceVersion: &quot;&quot;},
            Status: &quot;Failure&quot;,
            Message: &quot;the server does not allow access to the requested resource (put serviceAccounts default)&quot;,
            Reason: &quot;Forbidden&quot;,
            Details: {
                Name: &quot;default&quot;,
                Group: &quot;&quot;,
                Kind: &quot;serviceAccounts&quot;,
                Causes: [
                    {
                        Type: &quot;UnexpectedServerResponse&quot;,
                        Message: &quot;Forbidden: \&quot;/api/v1/namespaces/e2e-tests-svcaccounts-c84sj/serviceaccounts/default\&quot;&quot;,
                        Field: &quot;&quot;,
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (put serviceAccounts default)
not to have occurred"><pre class="notranslate"><code class="notranslate">/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/service_accounts.go:153
Expected error:
    &lt;*errors.StatusError | 0xc820aafa80&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: "", APIVersion: ""},
            ListMeta: {SelfLink: "", ResourceVersion: ""},
            Status: "Failure",
            Message: "the server does not allow access to the requested resource (put serviceAccounts default)",
            Reason: "Forbidden",
            Details: {
                Name: "default",
                Group: "",
                Kind: "serviceAccounts",
                Causes: [
                    {
                        Type: "UnexpectedServerResponse",
                        Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-svcaccounts-c84sj/serviceaccounts/default\"",
                        Field: "",
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (put serviceAccounts default)
not to have occurred
</code></pre></div>
<p dir="auto">Failed: [k8s.io] EmptyDir volumes should support (root,0644,default) [Conformance] {Kubernetes e2e suite}</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
    &lt;*errors.StatusError | 0xc8200a2780&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: &quot;&quot;, APIVersion: &quot;&quot;},
            ListMeta: {SelfLink: &quot;&quot;, ResourceVersion: &quot;&quot;},
            Status: &quot;Failure&quot;,
            Message: &quot;the server does not allow access to the requested resource (get serviceAccounts)&quot;,
            Reason: &quot;Forbidden&quot;,
            Details: {
                Name: &quot;&quot;,
                Group: &quot;&quot;,
                Kind: &quot;serviceAccounts&quot;,
                Causes: [
                    {
                        Type: &quot;UnexpectedServerResponse&quot;,
                        Message: &quot;Forbidden: \&quot;/api/v1/watch/namespaces/e2e-tests-emptydir-z0q53/serviceaccounts?fieldSelector=metadata.name%3Ddefault\&quot;&quot;,
                        Field: &quot;&quot;,
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred"><pre class="notranslate"><code class="notranslate">/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
    &lt;*errors.StatusError | 0xc8200a2780&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: "", APIVersion: ""},
            ListMeta: {SelfLink: "", ResourceVersion: ""},
            Status: "Failure",
            Message: "the server does not allow access to the requested resource (get serviceAccounts)",
            Reason: "Forbidden",
            Details: {
                Name: "",
                Group: "",
                Kind: "serviceAccounts",
                Causes: [
                    {
                        Type: "UnexpectedServerResponse",
                        Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-emptydir-z0q53/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
                        Field: "",
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred
</code></pre></div>
<p dir="auto">Failed: [k8s.io] Proxy version v1 should proxy to cadvisor using proxy subresource [Conformance] {Kubernetes e2e suite}</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
    &lt;*errors.StatusError | 0xc820e80300&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: &quot;&quot;, APIVersion: &quot;&quot;},
            ListMeta: {SelfLink: &quot;&quot;, ResourceVersion: &quot;&quot;},
            Status: &quot;Failure&quot;,
            Message: &quot;the server does not allow access to the requested resource (get serviceAccounts)&quot;,
            Reason: &quot;Forbidden&quot;,
            Details: {
                Name: &quot;&quot;,
                Group: &quot;&quot;,
                Kind: &quot;serviceAccounts&quot;,
                Causes: [
                    {
                        Type: &quot;UnexpectedServerResponse&quot;,
                        Message: &quot;Forbidden: \&quot;/api/v1/watch/namespaces/e2e-tests-proxy-z4jp6/serviceaccounts?fieldSelector=metadata.name%3Ddefault\&quot;&quot;,
                        Field: &quot;&quot;,
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred"><pre class="notranslate"><code class="notranslate">/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
    &lt;*errors.StatusError | 0xc820e80300&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: "", APIVersion: ""},
            ListMeta: {SelfLink: "", ResourceVersion: ""},
            Status: "Failure",
            Message: "the server does not allow access to the requested resource (get serviceAccounts)",
            Reason: "Forbidden",
            Details: {
                Name: "",
                Group: "",
                Kind: "serviceAccounts",
                Causes: [
                    {
                        Type: "UnexpectedServerResponse",
                        Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-proxy-z4jp6/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
                        Field: "",
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred
</code></pre></div>
<p dir="auto">Failed: [k8s.io] Proxy version v1 should proxy through a service and a pod [Conformance] {Kubernetes e2e suite}</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/proxy.go:260
Expected error:
    &lt;*errors.StatusError | 0xc820096380&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: &quot;&quot;, APIVersion: &quot;&quot;},
            ListMeta: {SelfLink: &quot;&quot;, ResourceVersion: &quot;&quot;},
            Status: &quot;Failure&quot;,
            Message: &quot;the server does not allow access to the requested resource (post services)&quot;,
            Reason: &quot;Forbidden&quot;,
            Details: {
                Name: &quot;&quot;,
                Group: &quot;&quot;,
                Kind: &quot;services&quot;,
                Causes: [
                    {
                        Type: &quot;UnexpectedServerResponse&quot;,
                        Message: &quot;Forbidden: \&quot;/api/v1/namespaces/e2e-tests-proxy-rchpk/services\&quot;&quot;,
                        Field: &quot;&quot;,
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (post services)
not to have occurred"><pre class="notranslate"><code class="notranslate">/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/proxy.go:260
Expected error:
    &lt;*errors.StatusError | 0xc820096380&gt;: {
        ErrStatus: {
            TypeMeta: {Kind: "", APIVersion: ""},
            ListMeta: {SelfLink: "", ResourceVersion: ""},
            Status: "Failure",
            Message: "the server does not allow access to the requested resource (post services)",
            Reason: "Forbidden",
            Details: {
                Name: "",
                Group: "",
                Kind: "services",
                Causes: [
                    {
                        Type: "UnexpectedServerResponse",
                        Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-proxy-rchpk/services\"",
                        Field: "",
                    },
                ],
                RetryAfterSeconds: 0,
            },
            Code: 403,
        },
    }
    the server does not allow access to the requested resource (post services)
not to have occurred
</code></pre></div>
<p dir="auto">Issues about this test specifically: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="156511442" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/26164" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/26164/hovercard" href="https://github.com/kubernetes/kubernetes/issues/26164">#26164</a> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="156617151" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/26210" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/26210/hovercard" href="https://github.com/kubernetes/kubernetes/issues/26210">#26210</a></p>
<p dir="auto">Right now we have for GCE <code class="notranslate">config-default.sh</code> and <code class="notranslate">config-test.sh</code> and they are (after a recent PR of mine merges) isomorphic i.e. one is a duplicate of the other with some settings flipped. I think this makes it hard to maintain these files since they have to remain in sync.</p>
<p dir="auto">I propose that we require the significant env vars in <code class="notranslate">config-default.sh</code> to be over-ridable from the enclosing environment. Then the test driver scripts and programs (e.g. for e2e) could set things like <code class="notranslate">INSTANCE_PREFIX</code> and <code class="notranslate">ENBALE_CLUSTER_LOGGING</code> as env vars and just source <code class="notranslate">config-default.h</code></p>