Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cloud/azure: TestAzureFileCredential failed #140737

Open
cockroach-teamcity opened this issue Feb 7, 2025 · 1 comment
Open

cloud/azure: TestAzureFileCredential failed #140737

cockroach-teamcity opened this issue Feb 7, 2025 · 1 comment
Labels
A-disaster-recovery branch-release-25.1 C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery

Comments

@cockroach-teamcity
Copy link
Member

cockroach-teamcity commented Feb 7, 2025 •
edited by cockroach-jira-scripts
Loading

cloud/azure.TestAzureFileCredential failed with artifacts on release-25.1 @ 4245e394efda08522e3c158b2591b5720be70333:

        	            	--------------------------------------------------------------------------------
        	            	To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        	Test:       	TestAzureFileCredential/valid
    --- FAIL: TestAzureFileCredential/valid (0.51s)
=== RUN   TestAzureFileCredential/reload-on-error
    --- FAIL: TestAzureFileCredential/reload-on-error (0.70s)
=== RUN   TestAzureFileCredential/default-chain-with-file
I250207 23:06:56.785966 55 cloud/azure/azure_file_credential.go:121  [-] 3  reloading file credentials from /artifacts/tmp/_tmp/10c693d0d458d908f652eeba1c53ae6c/TestAzureFileCredential2319400304/default-chain
    azure_file_credentials_test.go:134: 
        	Error Trace:	pkg/cloud/azure/azure_file_credentials_test.go:134
        	Error:      	Received unexpected error:
        	            	ChainedTokenCredential authentication failed. failed to acquire a token.
        	            	Attempted credentials:
        	            		ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        	            	{"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 7c028ff3-74c1-4d1c-b928-916726033400 Correlation ID: 575cd5a9-044a-4b1d-81b6-aa1f7eab9480 Timestamp: 2025-02-07 23:06:56Z","error_codes":[7000222],"timestamp":"2025-02-07 23:06:56Z","trace_id":"7c028ff3-74c1-4d1c-b928-916726033400","correlation_id":"575cd5a9-044a-4b1d-81b6-aa1f7eab9480","error_uri":"https://login.microsoftonline.com/error?code=7000222"}
        	            	POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	--------------------------------------------------------------------------------
        	            	RESPONSE 401 Unauthorized
        	            	--------------------------------------------------------------------------------
        	            	{
        	            	  "error": "invalid_client",
        	            	  "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 7c028ff3-74c1-4d1c-b928-916726033400 Correlation ID: 575cd5a9-044a-4b1d-81b6-aa1f7eab9480 Timestamp: 2025-02-07 23:06:56Z",
        	            	  "error_codes": [
        	            	    7000222
        	            	  ],
        	            	  "timestamp": "2025-02-07 23:06:56Z",
        	            	  "trace_id": "7c028ff3-74c1-4d1c-b928-916726033400",
        	            	  "correlation_id": "575cd5a9-044a-4b1d-81b6-aa1f7eab9480",
        	            	  "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	}
        	            	--------------------------------------------------------------------------------
        	            	To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        	            	POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	--------------------------------------------------------------------------------
        	            	RESPONSE 401 Unauthorized
        	            	--------------------------------------------------------------------------------
        	            	{
        	            	  "error": "invalid_client",
        	            	  "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 7c028ff3-74c1-4d1c-b928-916726033400 Correlation ID: 575cd5a9-044a-4b1d-81b6-aa1f7eab9480 Timestamp: 2025-02-07 23:06:56Z",
        	            	  "error_codes": [
        	            	    7000222
        	            	  ],
        	            	  "timestamp": "2025-02-07 23:06:56Z",
        	            	  "trace_id": "7c028ff3-74c1-4d1c-b928-916726033400",
        	            	  "correlation_id": "575cd5a9-044a-4b1d-81b6-aa1f7eab9480",
        	            	  "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	}
        	            	--------------------------------------------------------------------------------
        	Test:       	TestAzureFileCredential/default-chain-with-file
    --- FAIL: TestAzureFileCredential/default-chain-with-file (111.47s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

/cc @cockroachdb/disaster-recovery

This test on roachdash | Improve this report!

Jira issue: CRDB-47332
@cockroach-teamcity cockroach-teamcity added branch-release-25.1 C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery labels Feb 7, 2025
This was referenced Feb 7, 2025
Open
Open
Open
@cockroach-teamcity
Copy link
Member Author

cloud/azure.TestAzureFileCredential failed with artifacts on release-25.1 @ a8c4645988555b91115e4fe57ebea5ca8a2269a5:

        	            	  | github.com/cockroachdb/cockroach/pkg/cloud.(*esWrapper).List
        	            	  | 	pkg/cloud/impl_registry.go:420
        	            	  | github.com/cockroachdb/cockroach/pkg/cloud/azure.TestAzureFileCredential.func5.2
        	            	  | 	pkg/cloud/azure/azure_file_credentials_test.go:207
        	            	  | testing.tRunner
        	            	  | 	GOROOT/src/testing/testing.go:1689
        	            	  | runtime.goexit
        	            	  | 	src/runtime/asm_amd64.s:1695
        	            	Wraps: (2) unable to list files for specified blob
        	            	Wraps: (3)
        	            	Wraps: (4) ChainedTokenCredential authentication failed. failed to acquire a token.
        	            	  | Attempted credentials:
        	            	  | 	ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        	            	  | {"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 7c9ea789-8577-4faa-b4d3-2a09f8781000 Correlation ID: ecde87ea-b1a9-44b6-bef4-ab73a98eebd3 Timestamp: 2025-02-08 23:07:02Z","error_codes":[7000222],"timestamp":"2025-02-08 23:07:02Z","trace_id":"7c9ea789-8577-4faa-b4d3-2a09f8781000","correlation_id":"ecde87ea-b1a9-44b6-bef4-ab73a98eebd3","error_uri":"https://login.microsoftonline.com/error?code=7000222"}
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 7c9ea789-8577-4faa-b4d3-2a09f8781000 Correlation ID: ecde87ea-b1a9-44b6-bef4-ab73a98eebd3 Timestamp: 2025-02-08 23:07:02Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-08 23:07:02Z",
        	            	  |   "trace_id": "7c9ea789-8577-4faa-b4d3-2a09f8781000",
        	            	  |   "correlation_id": "ecde87ea-b1a9-44b6-bef4-ab73a98eebd3",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	  | To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 7c9ea789-8577-4faa-b4d3-2a09f8781000 Correlation ID: ecde87ea-b1a9-44b6-bef4-ab73a98eebd3 Timestamp: 2025-02-08 23:07:02Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-08 23:07:02Z",
        	            	  |   "trace_id": "7c9ea789-8577-4faa-b4d3-2a09f8781000",
        	            	  |   "correlation_id": "ecde87ea-b1a9-44b6-bef4-ab73a98eebd3",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	Error types: (1) *withstack.withStack (2) *errutil.withPrefix (3) *errorinfo.nonRetriableError (4) *azidentity.AuthenticationFailedError
        	Test:       	TestAzureFileCredential/reload-on-error/valid-on-reload
        --- FAIL: TestAzureFileCredential/reload-on-error/valid-on-reload (0.39s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

This test on roachdash | Improve this report!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
A-disaster-recovery branch-release-25.1 C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cockroach-teamcity