Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cloud/azure: TestEncryptDecryptAzure failed #140761

Open
cockroach-teamcity opened this issue Feb 8, 2025 · 2 comments
Open

cloud/azure: TestEncryptDecryptAzure failed #140761

cockroach-teamcity opened this issue Feb 8, 2025 · 2 comments
Labels
A-disaster-recovery branch-master Failures and bugs on the master branch. C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery

Comments

@cockroach-teamcity
Copy link
Member

cockroach-teamcity commented Feb 8, 2025 •
edited by cockroach-jira-scripts
Loading

cloud/azure.TestEncryptDecryptAzure failed with artifacts on master @ 0d284cc52708504d8c71c4358041f45fcf792a52:

        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: ae3d039f-a000-44c0-a5ff-e8c23a632500 Correlation ID: 14de5b52-693f-4a89-8d67-1ab13ad151bf Timestamp: 2025-02-08 00:06:34Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-08 00:06:34Z",
        	            	  |   "trace_id": "ae3d039f-a000-44c0-a5ff-e8c23a632500",
        	            	  |   "correlation_id": "14de5b52-693f-4a89-8d67-1ab13ad151bf",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	Error types: (1) *markers.withMark (2) *azidentity.AuthenticationFailedError
        	Test:       	TestEncryptDecryptAzure/implicit_file_auth/simple_encrypt_decrypt
        --- FAIL: TestEncryptDecryptAzure/implicit_file_auth/simple_encrypt_decrypt (0.83s)
=== RUN   TestEncryptDecryptAzure/explicit_auth/simple_encrypt_decrypt
    kms_test_utils.go:61: 
        	Error Trace:	pkg/cloud/kms_test_utils.go:61
        	Error:      	Received unexpected error:
        	            	ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        	            	(1) forced error mark
        	            	  | "kms inaccessible"
        	            	  | github.com/cockroachdb/errors/withstack/*withstack.withStack::
        	            	Wraps: (2) ClientSecretCredential authentication failed. FromClientSecret(): http call(https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token)(POST) error: reply status code was 401:
        	            	  | {"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 8703866d-1169-43a2-acc7-751c9bc83600 Correlation ID: b5134463-7e0e-48b9-beeb-2192e0c2754f Timestamp: 2025-02-08 00:04:38Z","error_codes":[7000222],"timestamp":"2025-02-08 00:04:38Z","trace_id":"8703866d-1169-43a2-acc7-751c9bc83600","correlation_id":"b5134463-7e0e-48b9-beeb-2192e0c2754f","error_uri":"https://login.microsoftonline.com/error?code=7000222"}
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 8703866d-1169-43a2-acc7-751c9bc83600 Correlation ID: b5134463-7e0e-48b9-beeb-2192e0c2754f Timestamp: 2025-02-08 00:04:38Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-08 00:04:38Z",
        	            	  |   "trace_id": "8703866d-1169-43a2-acc7-751c9bc83600",
        	            	  |   "correlation_id": "b5134463-7e0e-48b9-beeb-2192e0c2754f",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	  | To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        	            	Error types: (1) *markers.withMark (2) *azidentity.AuthenticationFailedError
        	Test:       	TestEncryptDecryptAzure/explicit_auth/simple_encrypt_decrypt
        --- FAIL: TestEncryptDecryptAzure/explicit_auth/simple_encrypt_decrypt (0.36s)
=== RUN   TestEncryptDecryptAzure/implicit_auth
    --- FAIL: TestEncryptDecryptAzure/implicit_auth (0.22s)
=== RUN   TestEncryptDecryptAzure/implicit_file_auth
    --- FAIL: TestEncryptDecryptAzure/implicit_file_auth (115.07s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

/cc @cockroachdb/disaster-recovery

This test on roachdash | Improve this report!

Jira issue: CRDB-47350
@cockroach-teamcity cockroach-teamcity added branch-master Failures and bugs on the master branch. C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery labels Feb 8, 2025
This was referenced Feb 8, 2025
Open
Open
Open
@cockroach-teamcity
Copy link
Member Author

cloud/azure.TestEncryptDecryptAzure failed with artifacts on master @ ecfb74b7ad75327f11814966a2cdab1b9793a549:

        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: feedfbf1-a9bb-4e33-9940-2b21fa170c00 Correlation ID: b756a430-830d-4cad-a7d3-6c0b81acca12 Timestamp: 2025-02-09 00:04:55Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-09 00:04:55Z",
        	            	  |   "trace_id": "feedfbf1-a9bb-4e33-9940-2b21fa170c00",
        	            	  |   "correlation_id": "b756a430-830d-4cad-a7d3-6c0b81acca12",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	  | To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: feedfbf1-a9bb-4e33-9940-2b21fa170c00 Correlation ID: b756a430-830d-4cad-a7d3-6c0b81acca12 Timestamp: 2025-02-09 00:04:55Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-09 00:04:55Z",
        	            	  |   "trace_id": "feedfbf1-a9bb-4e33-9940-2b21fa170c00",
        	            	  |   "correlation_id": "b756a430-830d-4cad-a7d3-6c0b81acca12",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	  |
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: feedfbf1-a9bb-4e33-9940-2b21fa170c00 Correlation ID: b756a430-830d-4cad-a7d3-6c0b81acca12 Timestamp: 2025-02-09 00:04:55Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-09 00:04:55Z",
        	            	  |   "trace_id": "feedfbf1-a9bb-4e33-9940-2b21fa170c00",
        	            	  |   "correlation_id": "b756a430-830d-4cad-a7d3-6c0b81acca12",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	Error types: (1) *markers.withMark (2) *azidentity.AuthenticationFailedError
        	Test:       	TestEncryptDecryptAzure/implicit_auth/simple_encrypt_decrypt
        --- FAIL: TestEncryptDecryptAzure/implicit_auth/simple_encrypt_decrypt (0.21s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

This test on roachdash | Improve this report!

@cockroach-teamcity cockroach-teamcity mentioned this issue Feb 9, 2025
Open
@cockroach-teamcity
Copy link
Member Author

cloud/azure.TestEncryptDecryptAzure failed with artifacts on master @ d65ba4b969eb796f8fafd125f11b8a1ad437b17a:

        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 0ca0e03e-a88d-4b8d-844e-5d63651d2300 Correlation ID: 3a6cf236-a397-492f-8917-a81bd8a6941e Timestamp: 2025-02-10 00:07:30Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-10 00:07:30Z",
        	            	  |   "trace_id": "0ca0e03e-a88d-4b8d-844e-5d63651d2300",
        	            	  |   "correlation_id": "3a6cf236-a397-492f-8917-a81bd8a6941e",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	  | To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#client-secret
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 0ca0e03e-a88d-4b8d-844e-5d63651d2300 Correlation ID: 3a6cf236-a397-492f-8917-a81bd8a6941e Timestamp: 2025-02-10 00:07:30Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-10 00:07:30Z",
        	            	  |   "trace_id": "0ca0e03e-a88d-4b8d-844e-5d63651d2300",
        	            	  |   "correlation_id": "3a6cf236-a397-492f-8917-a81bd8a6941e",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	  |
        	            	  | POST https://login.microsoftonline.com/166ae090-e164-40b7-b4f0-763fba013597/oauth2/v2.0/token
        	            	  | --------------------------------------------------------------------------------
        	            	  | RESPONSE 401 Unauthorized
        	            	  | --------------------------------------------------------------------------------
        	            	  | {
        	            	  |   "error": "invalid_client",
        	            	  |   "error_description": "AADSTS7000222: The provided client secret keys for app 'b25619ee-01af-4bd2-bc4c-9650ea365920' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. Trace ID: 0ca0e03e-a88d-4b8d-844e-5d63651d2300 Correlation ID: 3a6cf236-a397-492f-8917-a81bd8a6941e Timestamp: 2025-02-10 00:07:30Z",
        	            	  |   "error_codes": [
        	            	  |     7000222
        	            	  |   ],
        	            	  |   "timestamp": "2025-02-10 00:07:30Z",
        	            	  |   "trace_id": "0ca0e03e-a88d-4b8d-844e-5d63651d2300",
        	            	  |   "correlation_id": "3a6cf236-a397-492f-8917-a81bd8a6941e",
        	            	  |   "error_uri": "https://login.microsoftonline.com/error?code=7000222"
        	            	  | }
        	            	  | --------------------------------------------------------------------------------
        	            	Error types: (1) *markers.withMark (2) *azidentity.AuthenticationFailedError
        	Test:       	TestEncryptDecryptAzure/implicit_auth/simple_encrypt_decrypt
        --- FAIL: TestEncryptDecryptAzure/implicit_auth/simple_encrypt_decrypt (0.24s)
=== RUN   TestEncryptDecryptAzure/implicit_auth
    --- FAIL: TestEncryptDecryptAzure/implicit_auth (0.24s)
Help

See also: How To Investigate a Go Test Failure (internal)

Same failure on other branches

This test on roachdash | Improve this report!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
A-disaster-recovery branch-master Failures and bugs on the master branch. C-test-failure Broken test (automatically or manually discovered). O-robot Originated from a bot. release-blocker Indicates a release-blocker. Use with branch-release-2x.x label to denote which branch is blocked. T-disaster-recovery
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cockroach-teamcity