{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/60598","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/60598/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/60598/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/60598/events","html_url":"https://github.com/kubernetes/kubernetes/issues/60598","id":301233859,"number":60598,"title":"go1.10 failing test: k8s.io/apiserver/pkg/authentication/request/x509","user":{"login":"cblecker","id":1431969,"avatar_url":"https://avatars1.githubusercontent.com/u/1431969?v=4","gravatar_id":"","url":"https://api.github.com/users/cblecker","html_url":"https://github.com/cblecker","followers_url":"https://api.github.com/users/cblecker/followers","following_url":"https://api.github.com/users/cblecker/following{/other_user}","gists_url":"https://api.github.com/users/cblecker/gists{/gist_id}","starred_url":"https://api.github.com/users/cblecker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cblecker/subscriptions","organizations_url":"https://api.github.com/users/cblecker/orgs","repos_url":"https://api.github.com/users/cblecker/repos","events_url":"https://api.github.com/users/cblecker/events{/privacy}","received_events_url":"https://api.github.com/users/cblecker/received_events","type":"User","site_admin":false},"labels":[{"id":105146071,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/bug","name":"kind/bug","color":"e11d21","default":false},{"id":357119284,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/sig/auth","name":"sig/auth","color":"d2b48c","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/kubernetes/kubernetes/milestones/38","html_url":"https://github.com/kubernetes/kubernetes/milestone/38","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/milestones/38/labels","id":2848396,"number":38,"title":"v1.11","description":null,"creator":{"login":"mtaufen","id":903617,"avatar_url":"https://avatars1.githubusercontent.com/u/903617?v=4","gravatar_id":"","url":"https://api.github.com/users/mtaufen","html_url":"https://github.com/mtaufen","followers_url":"https://api.github.com/users/mtaufen/followers","following_url":"https://api.github.com/users/mtaufen/following{/other_user}","gists_url":"https://api.github.com/users/mtaufen/gists{/gist_id}","starred_url":"https://api.github.com/users/mtaufen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mtaufen/subscriptions","organizations_url":"https://api.github.com/users/mtaufen/orgs","repos_url":"https://api.github.com/users/mtaufen/repos","events_url":"https://api.github.com/users/mtaufen/events{/privacy}","received_events_url":"https://api.github.com/users/mtaufen/received_events","type":"User","site_admin":false},"open_issues":34,"closed_issues":0,"state":"open","created_at":"2017-10-18T17:24:38Z","updated_at":"2018-03-01T00:27:15Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2018-03-01T00:18:57Z","updated_at":"2018-03-01T00:28:28Z","closed_at":null,"author_association":"MEMBER","body":"In go1.10, the following test fails:\r\n```\r\n$ go test -v ./vendor/k8s.io/apiserver/pkg/authentication/request/x509\r\n=== RUN   TestX509\r\n--- FAIL: TestX509 (0.02s)\r\n        x509_test.go:700: server cert: Expected error, got none\r\n=== RUN   TestX509Verifier\r\n--- FAIL: TestX509Verifier (0.00s)\r\n        x509_test.go:855: server cert disallowed: Expected error, got none\r\nFAIL\r\nFAIL    k8s.io/kubernetes/vendor/k8s.io/apiserver/pkg/authentication/request/x509       0.039s\r\n```\r\n\r\ncc: @kubernetes/sig-auth-bugs @liggitt "},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/369431992","html_url":"https://github.com/kubernetes/kubernetes/issues/60598#issuecomment-369431992","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/60598","id":369431992,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars0.githubusercontent.com/u/980082?v=4","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2018-03-01T00:28:28Z","updated_at":"2018-03-01T00:28:28Z","author_association":"MEMBER","body":"Looks like it could be an issue with go. From the release notes:\r\n\r\n> crypto/x509\r\n> Extended key usage restrictions are similarly now checked all at once. As a result, after a certificate has been validated, now it can be trusted in its entirety. It is no longer necessary to revalidate the certificate for each additional name or key usage\r\n\r\nWill dig tomorrow, but it seems like 1.10 may have changed the behavior of key usage verification. "}}
{"actor":{"display_login":"liggitt"}}