Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cloud/azure: TestAzureStorageFileImplicitAuth failed #140759

Closed
cockroach-teamcity opened this issue Feb 8, 2025 · 2 comments
Closed

cloud/azure: TestAzureStorageFileImplicitAuth failed #140759

cockroach-teamcity opened this issue Feb 8, 2025 · 2 comments
Labels
A-disaster-recovery branch-master Failures and bugs on the master branch. C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery

Comments

@cockroach-teamcity
Copy link
Member

cockroach-teamcity commented Feb 8, 2025

cloud/azure.TestAzureStorageFileImplicitAuth failed with artifacts on master @ 0d284cc52708504d8c71c4358041f45fcf792a52:

            7000222
          ],
          "timestamp": "2025-02-08 00:08:39Z",
          "trace_id": "8fd03f81-0e22-4a23-be82-2ef0d5873300",
          "correlation_id": "8476e322-eda7-4866-ad9b-120a39c19474",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
I250208 00:08:39.805195 872 cloud/azure/azure_file_credential.go:121  [-] 12  reloading file credentials from /artifacts/tmp/_tmp/10c693d0d458d908f652eeba1c53ae6c/TestAzureStorageFileImplicitAuth3129872480/credentials.json
    --- FAIL: TestAzureStorageFileImplicitAuth/file-does-not-exist (0.23s)
=== RUN   TestAzureStorageFileImplicitAuth/read-single-file-by-uri
I250208 00:08:38.895552 836 cloud/azure/azure_file_credential.go:121  [-] 9  reloading file credentials from /artifacts/tmp/_tmp/10c693d0d458d908f652eeba1c53ae6c/TestAzureStorageFileImplicitAuth3129872480/credentials.json
    cloud_test_helpers.go:272: closing object: ChainedTokenCredential authentication failed. failed to acquire a token.
        Attempted credentials:
        	ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        {"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: e94e44fc-c90c-446f-9fc0-3a0742f60100 Correlation ID: 13e321f0-ca9e-41fd-8878-47e762c11a4f Timestamp: 2025-02-08 00:08:39Z","error_codes":[7000222],"timestamp":"2025-02-08 00:08:39Z","trace_id":"e94e44fc-c90c-446f-9fc0-3a0742f60100","correlation_id":"13e321f0-ca9e-41fd-8878-47e762c11a4f","error_uri":"https://login.microsoftonline.com/error?code=7000222"}
        POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        --------------------------------------------------------------------------------
        RESPONSE 401 Unauthorized
        --------------------------------------------------------------------------------
        {
          "error": "invalid_client",
          "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: e94e44fc-c90c-446f-9fc0-3a0742f60100 Correlation ID: 13e321f0-ca9e-41fd-8878-47e762c11a4f Timestamp: 2025-02-08 00:08:39Z",
          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-08 00:08:39Z",
          "trace_id": "e94e44fc-c90c-446f-9fc0-3a0742f60100",
          "correlation_id": "13e321f0-ca9e-41fd-8878-47e762c11a4f",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
        To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        --------------------------------------------------------------------------------
        RESPONSE 401 Unauthorized
        --------------------------------------------------------------------------------
        {
          "error": "invalid_client",
          "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: e94e44fc-c90c-446f-9fc0-3a0742f60100 Correlation ID: 13e321f0-ca9e-41fd-8878-47e762c11a4f Timestamp: 2025-02-08 00:08:39Z",
          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-08 00:08:39Z",
          "trace_id": "e94e44fc-c90c-446f-9fc0-3a0742f60100",
          "correlation_id": "13e321f0-ca9e-41fd-8878-47e762c11a4f",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
    --- FAIL: TestAzureStorageFileImplicitAuth/read-single-file-by-uri (0.27s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

/cc @cockroachdb/disaster-recovery

This test on roachdash | Improve this report!

Jira issue: CRDB-47348

@cockroach-teamcity cockroach-teamcity added branch-master Failures and bugs on the master branch. C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery labels Feb 8, 2025
@cockroach-teamcity
Copy link
Member Author

cloud/azure.TestAzureStorageFileImplicitAuth failed with artifacts on master @ ecfb74b7ad75327f11814966a2cdab1b9793a549:

            7000222
          ],
          "timestamp": "2025-02-09 00:09:01Z",
          "trace_id": "7f6e8058-70df-4037-911a-535d97c41400",
          "correlation_id": "bb3b8b2e-3d2c-45a1-aa2e-acdae3a84e6d",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
I250209 00:09:02.025385 282 cloud/azure/azure_file_credential.go:121  [-] 12  reloading file credentials from /artifacts/tmp/_tmp/10c693d0d458d908f652eeba1c53ae6c/TestAzureStorageFileImplicitAuth286443416/credentials.json
    --- FAIL: TestAzureStorageFileImplicitAuth/file-does-not-exist (0.36s)
=== RUN   TestAzureStorageFileImplicitAuth/simple_round_trip
I250209 00:09:00.017218 835 cloud/azure/azure_file_credential.go:121  [-] 7  reloading file credentials from /artifacts/tmp/_tmp/10c693d0d458d908f652eeba1c53ae6c/TestAzureStorageFileImplicitAuth286443416/credentials.json
    cloud_test_helpers.go:183: closing object: ChainedTokenCredential authentication failed. failed to acquire a token.
        Attempted credentials:
        	ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        {"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: efa04660-5b6e-4ceb-9399-d67ecb540b00 Correlation ID: 0fcf0ccf-7a8e-48bb-80ec-71f54470d39b Timestamp: 2025-02-09 00:09:00Z","error_codes":[7000222],"timestamp":"2025-02-09 00:09:00Z","trace_id":"efa04660-5b6e-4ceb-9399-d67ecb540b00","correlation_id":"0fcf0ccf-7a8e-48bb-80ec-71f54470d39b","error_uri":"https://login.microsoftonline.com/error?code=7000222"}
        POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        --------------------------------------------------------------------------------
        RESPONSE 401 Unauthorized
        --------------------------------------------------------------------------------
        {
          "error": "invalid_client",
          "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: efa04660-5b6e-4ceb-9399-d67ecb540b00 Correlation ID: 0fcf0ccf-7a8e-48bb-80ec-71f54470d39b Timestamp: 2025-02-09 00:09:00Z",
          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-09 00:09:00Z",
          "trace_id": "efa04660-5b6e-4ceb-9399-d67ecb540b00",
          "correlation_id": "0fcf0ccf-7a8e-48bb-80ec-71f54470d39b",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
        To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        --------------------------------------------------------------------------------
        RESPONSE 401 Unauthorized
        --------------------------------------------------------------------------------
        {
          "error": "invalid_client",
          "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: efa04660-5b6e-4ceb-9399-d67ecb540b00 Correlation ID: 0fcf0ccf-7a8e-48bb-80ec-71f54470d39b Timestamp: 2025-02-09 00:09:00Z",
          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-09 00:09:00Z",
          "trace_id": "efa04660-5b6e-4ceb-9399-d67ecb540b00",
          "correlation_id": "0fcf0ccf-7a8e-48bb-80ec-71f54470d39b",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
    --- FAIL: TestAzureStorageFileImplicitAuth/simple_round_trip (0.52s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

This test on roachdash | Improve this report!

@cockroach-teamcity
Copy link
Member Author

cloud/azure.TestAzureStorageFileImplicitAuth failed with artifacts on master @ d65ba4b969eb796f8fafd125f11b8a1ad437b17a:

          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-10 00:11:21Z",
          "trace_id": "cbcd705e-12b8-433b-b23c-c3bd137a2100",
          "correlation_id": "3c9e009a-37c9-40d9-93a1-cd6bdaeaf294",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
    --- FAIL: TestAzureStorageFileImplicitAuth/exceeds-4mb-chunk (0.37s)
=== RUN   TestAzureStorageFileImplicitAuth/write-single-file-by-uri
I250210 00:11:21.657390 852 cloud/azure/azure_file_credential.go:121  [-] 10  reloading file credentials from /artifacts/tmp/_tmp/10c693d0d458d908f652eeba1c53ae6c/TestAzureStorageFileImplicitAuth4140598077/credentials.json
    cloud_test_helpers.go:300: closing object: ChainedTokenCredential authentication failed. failed to acquire a token.
        Attempted credentials:
        	ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        {"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: e3eabec6-282f-410b-90ed-3d498b592000 Correlation ID: d2d37a20-1820-426b-bca0-8bcd3542ad37 Timestamp: 2025-02-10 00:11:21Z","error_codes":[7000222],"timestamp":"2025-02-10 00:11:21Z","trace_id":"e3eabec6-282f-410b-90ed-3d498b592000","correlation_id":"d2d37a20-1820-426b-bca0-8bcd3542ad37","error_uri":"https://login.microsoftonline.com/error?code=7000222"}
        POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        --------------------------------------------------------------------------------
        RESPONSE 401 Unauthorized
        --------------------------------------------------------------------------------
        {
          "error": "invalid_client",
          "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: e3eabec6-282f-410b-90ed-3d498b592000 Correlation ID: d2d37a20-1820-426b-bca0-8bcd3542ad37 Timestamp: 2025-02-10 00:11:21Z",
          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-10 00:11:21Z",
          "trace_id": "e3eabec6-282f-410b-90ed-3d498b592000",
          "correlation_id": "d2d37a20-1820-426b-bca0-8bcd3542ad37",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
        To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        --------------------------------------------------------------------------------
        RESPONSE 401 Unauthorized
        --------------------------------------------------------------------------------
        {
          "error": "invalid_client",
          "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: e3eabec6-282f-410b-90ed-3d498b592000 Correlation ID: d2d37a20-1820-426b-bca0-8bcd3542ad37 Timestamp: 2025-02-10 00:11:21Z",
          "error_codes": [
            7000222
          ],
          "timestamp": "2025-02-10 00:11:21Z",
          "trace_id": "e3eabec6-282f-410b-90ed-3d498b592000",
          "correlation_id": "d2d37a20-1820-426b-bca0-8bcd3542ad37",
          "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        }
        --------------------------------------------------------------------------------
    --- FAIL: TestAzureStorageFileImplicitAuth/write-single-file-by-uri (0.43s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

This test on roachdash | Improve this report!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-disaster-recovery branch-master Failures and bugs on the master branch. C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery
Projects
None yet
Development

No branches or pull requests

2 participants