Issue 1:
https://storage.googleapis.com/kubernetes-jenkins/logs/kubernetes-e2e-gke/8128/

Multiple broken tests:

Failed: [k8s.io] Services should be able to up and down services {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/service.go:278
Expected error:
<*errors.StatusError | 0xc820ac2380>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get services service1)",
Reason: "Forbidden",
Details: {
Name: "service1",
Group: "",
Kind: "services",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-services-l8pz3/services/service1\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get services service1)
not to have occurred

Issues about this test specifically: #26128

Failed: [k8s.io] Kubernetes Dashboard should check that the kubernetes-dashboard instance is alive {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820c60c00>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-kubernetes-dashboard-1jquj/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Issues about this test specifically: #26191

Failed: [k8s.io] Pods should invoke init containers on a RestartAlways pod {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820cf6c80>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-pods-eqzj1/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] ResourceQuota should create a ResourceQuota and ensure its status is promptly calculated. {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:123
May 30 21:59:29.917: Couldn't delete ns "e2e-tests-resourcequota-5uuju": the server does not allow access to the requested resource (delete namespaces e2e-tests-resourcequota-5uuju)

Failed: [k8s.io] Kubectl client [k8s.io] Kubectl label should update the label on a resource [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820544700>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-kubectl-26k49/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] EmptyDir wrapper volumes should becomes running {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/empty_dir_wrapper.go:179
May 30 22:00:12.827: unable to delete secret emptydir-wrapper-test-3b3fab64-26ec-11e6-8519-0242ac11000b: the server does not allow access to the requested resource (delete secrets emptydir-wrapper-test-3b3fab64-26ec-11e6-8519-0242ac11000b)

Failed: [k8s.io] ServiceAccounts should ensure a single API token exists {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/service_accounts.go:153
Expected error:
<*errors.StatusError | 0xc820a23d80>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (put serviceAccounts default)",
Reason: "Forbidden",
Details: {
Name: "default",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-svcaccounts-iggv0/serviceaccounts/default\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (put serviceAccounts default)
not to have occurred

Failed: [k8s.io] Deployment RollingUpdateDeployment should scale up and down in the right order {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820c9aa80>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-deployment-lcd5u/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] Kubectl client [k8s.io] Kubectl rolling-update should support rolling-update to same image [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/kubectl.go:931
Expected error:
<*errors.errorString | 0xc8202b1790>: {
s: "Error running &{/workspace/kubernetes/platforms/linux/amd64/kubectl [kubectl --server=https://104.155.153.5 --kubeconfig=/workspace/.kube/config rolling-update e2e-test-nginx-rc --update-period=1s --image=gcr.io/google_containers/nginx:1.7.9 --image-pull-policy=IfNotPresent --namespace=e2e-tests-kubectl-sm17p] [] <nil> Created e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4\nScaling up e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 from 0 to 1, scaling down e2e-test-nginx-rc from 1 to 0 (keep 1 pods available, don't exceed 2 pods)\nScaling e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 up to 1\nScaling e2e-test-nginx-rc down to 0\nUpdate succeeded. Deleting old controller: e2e-test-nginx-rc\n Error from server: the server does not allow access to the requested resource (delete replicationControllers e2e-test-nginx-rc)\n [] <nil> 0xc820789660 exit status 1 <nil> true [0xc82094ec80 0xc82094ec98 0xc82094ecb0] [0xc82094ec80 0xc82094ec98 0xc82094ecb0] [0xc82094ec90 0xc82094eca8] [0x9e4f10 0x9e4f10] 0xc820b1b2c0}:\nCommand stdout:\nCreated e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4\nScaling up e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 from 0 to 1, scaling down e2e-test-nginx-rc from 1 to 0 (keep 1 pods available, don't exceed 2 pods)\nScaling e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 up to 1\nScaling e2e-test-nginx-rc down to 0\nUpdate succeeded. Deleting old controller: e2e-test-nginx-rc\n\nstderr:\nError from server: the server does not allow access to the requested resource (delete replicationControllers e2e-test-nginx-rc)\n\nerror:\nexit status 1\n",
}
Error running &{/workspace/kubernetes/platforms/linux/amd64/kubectl [kubectl --server=https://104.155.153.5 --kubeconfig=/workspace/.kube/config rolling-update e2e-test-nginx-rc --update-period=1s --image=gcr.io/google_containers/nginx:1.7.9 --image-pull-policy=IfNotPresent --namespace=e2e-tests-kubectl-sm17p] [] <nil> Created e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4
Scaling up e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 from 0 to 1, scaling down e2e-test-nginx-rc from 1 to 0 (keep 1 pods available, don't exceed 2 pods)
Scaling e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 up to 1
Scaling e2e-test-nginx-rc down to 0
Update succeeded. Deleting old controller: e2e-test-nginx-rc
Error from server: the server does not allow access to the requested resource (delete replicationControllers e2e-test-nginx-rc)
[] <nil> 0xc820789660 exit status 1 <nil> true [0xc82094ec80 0xc82094ec98 0xc82094ecb0] [0xc82094ec80 0xc82094ec98 0xc82094ecb0] [0xc82094ec90 0xc82094eca8] [0x9e4f10 0x9e4f10] 0xc820b1b2c0}:
Command stdout:
Created e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4
Scaling up e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 from 0 to 1, scaling down e2e-test-nginx-rc from 1 to 0 (keep 1 pods available, don't exceed 2 pods)
Scaling e2e-test-nginx-rc-dcb996e27755d3f584088354756126d4 up to 1
Scaling e2e-test-nginx-rc down to 0
Update succeeded. Deleting old controller: e2e-test-nginx-rc

stderr:
Error from server: the server does not allow access to the requested resource (delete replicationControllers e2e-test-nginx-rc)

error:
exit status 1

not to have occurred

Issues about this test specifically: #26138

Failed: [k8s.io] ResourceQuota should create a ResourceQuota and capture the life of a nodePort service. {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/resource_quota.go:170
Expected error:
<*errors.StatusError | 0xc820b67280>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (post resourceQuotas)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "resourceQuotas",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-resourcequota-fegyh/resourcequotas\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (post resourceQuotas)
not to have occurred

Failed: [k8s.io] [HPA] Horizontal pod autoscaling (scale resource: CPU) [k8s.io] ReplicationController light Should scale from 1 pod to 2 pods {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/horizontal_pod_autoscaling.go:89
Expected error:
<*errors.errorString | 0xc8208e86b0>: {
s: "error while stopping RC: rc-light: error getting replication controllers: error getting replication controllers: the server does not allow access to the requested resource (get replicationControllers)",
}
error while stopping RC: rc-light: error getting replication controllers: error getting replication controllers: the server does not allow access to the requested resource (get replicationControllers)
not to have occurred

Failed: ThirdParty resources Simple Third Party creating/deleting thirdparty objects works [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820d04a80>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-thirdparty-lwrey/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] ResourceQuota should create a ResourceQuota and capture the life of a replication controller. {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/resource_quota.go:446
Expected error:
<*errors.StatusError | 0xc820721b00>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get resourceQuotas test-quota)",
Reason: "Forbidden",
Details: {
Name: "test-quota",
Group: "",
Kind: "resourceQuotas",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-resourcequota-k902n/resourcequotas/test-quota\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get resourceQuotas test-quota)
not to have occurred

Failed: [k8s.io] Monitoring should verify monitoring pods and all cluster nodes are available on influxdb using heapster. {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820ca8200>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-monitoring-cwb43/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] Kubectl client [k8s.io] Kubectl run rc should create an rc from an image [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc82108c200>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-kubectl-jnzee/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] LimitRange should create a LimitRange with defaults and ensure pod has those defaults applied. {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/limit_range.go:102
Expected error:
<*errors.StatusError | 0xc820d4a100>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (post limitRanges)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "limitRanges",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-limitrange-oqlsl/limitranges\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (post limitRanges)
not to have occurred

Failed: [k8s.io] hostPath should support r/w {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820710a80>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-hostpath-7a3pj/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] ResourceQuota should create a ResourceQuota and capture the life of a service. {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820e52200>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-resourcequota-7p8c7/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] Services should serve a basic endpoint from pods [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/service.go:142
Expected error:
<*errors.StatusError | 0xc8209e6d00>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (delete pods pod1)",
Reason: "Forbidden",
Details: {
Name: "pod1",
Group: "",
Kind: "pods",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/namespaces/e2e-tests-services-g1atj/pods/pod1\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (delete pods pod1)
not to have occurred

Failed: [k8s.io] Deployment deployment should delete old replica sets {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820e4c800>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-deployment-0554g/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] ConfigMap should be consumable from pods in volume as non-root [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820ca8200>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-configmap-bee9d/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] Probing container with readiness probe that fails should never be ready and never restart [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/container_probe.go:111
May 30 22:00:49.185: expecting wait timeout error but got: the server has asked for the client to provide credentials (get pods test-webserver-439b498d-26ec-11e6-8eae-0242ac11000b)

Failed: [k8s.io] Pods should be submitted and removed [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/pods.go:407
kubelet never observed the termination notice
Expected error:
<*errors.errorString | 0xc8200b9060>: {
s: "timed out waiting for the condition",
}
timed out waiting for the condition
not to have occurred

Issues about this test specifically: #26224

Failed: [k8s.io] Deployment RecreateDeployment should delete old pods and create new ones {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820bd6c00>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-deployment-y5mod/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] ConfigMap updates should be reflected in volume [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/configmap.go:153
May 30 22:00:17.478: unable to delete configMap configmap-test-upd-1fcb7090-26ec-11e6-85ad-0242ac11000b: the server does not allow access to the requested resource (delete configmaps configmap-test-upd-1fcb7090-26ec-11e6-85ad-0242ac11000b)

Failed: [k8s.io] Kubectl client [k8s.io] Simple pod should support exec {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820ac0280>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-kubectl-yydla/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] Kubectl client [k8s.io] Simple pod should support port-forward {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc820c3a480>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-kubectl-dvbap/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Failed: [k8s.io] Deployment deployment should create new pods {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:123
May 30 21:59:10.308: Couldn't delete ns "e2e-tests-deployment-5dt68": the server does not allow access to the requested resource (delete namespaces e2e-tests-deployment-5dt68)

Failed: [k8s.io] Deployment deployment should support rollback {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/deployment.go:76
Expected error:
<errors.aggregate | len:2, cap:2>: [
{
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get replicasets.extensions test-rollback-deployment-2791939565)",
Reason: "Forbidden",
Details: {
Name: "test-rollback-deployment-2791939565",
Group: "extensions",
Kind: "replicasets",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/apis/extensions/v1beta1/namespaces/e2e-tests-deployment-zg552/replicasets/test-rollback-deployment-2791939565\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
},
{
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get replicasets.extensions test-rollback-deployment-707960274)",
Reason: "Forbidden",
Details: {
Name: "test-rollback-deployment-707960274",
Group: "extensions",
Kind: "replicasets",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/apis/extensions/v1beta1/namespaces/e2e-tests-deployment-zg552/replicasets/test-rollback-deployment-707960274\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
},
]
[the server does not allow access to the requested resource (get replicasets.extensions test-rollback-deployment-2791939565), the server does not allow access to the requested resource (get replicasets.extensions test-rollback-deployment-707960274)]
not to have occurred

Failed: [k8s.io] ReplicationController should serve a basic image on each replica with a public image [Conformance] {Kubernetes e2e suite}

/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/framework/framework.go:122
Expected error:
<*errors.StatusError | 0xc8204c8080>: {
ErrStatus: {
TypeMeta: {Kind: "", APIVersion: ""},
ListMeta: {SelfLink: "", ResourceVersion: ""},
Status: "Failure",
Message: "the server does not allow access to the requested resource (get serviceAccounts)",
Reason: "Forbidden",
Details: {
Name: "",
Group: "",
Kind: "serviceAccounts",
Causes: [
{
Type: "UnexpectedServerResponse",
Message: "Forbidden: \"/api/v1/watch/namespaces/e2e-tests-replication-controller-i1wmt/serviceaccounts?fieldSelector=metadata.name%3Ddefault\"",
Field: "",
},
],
RetryAfterSeconds: 0,
},
Code: 403,
},
}
the server does not allow access to the requested resource (get serviceAccounts)
not to have occurred

Issue 2:
Inside portforwardtester container in portforwardtester.go line 52

listener, err := net.Listen("tcp", fmt.Sprintf("localhost:%s", bindPort))

It causes app to only listen on the local interface, its not the problem with namespace based runtimes cause we can use nsenter.

With hypervisor based runtimes we need app to be available on external address, so line mentioned above should look like:

listener, err := net.Listen("tcp", fmt.Sprintf("0.0.0.0:%s", bindPort))

@ncdc PTAL cause i don't know who is owner of this container

@feiskyer could you check if this is a problem for hyper too ?