manageiq: Sporadic failures with fix_auth
https://travis-ci.com/github/ManageIQ/manageiq/jobs/482314040#L719
Failures:
1) FixAuth::AuthModel#authentications #recrypt should raise exception for bad encryption
Failure/Error: expect { subject.fix_passwords(bad) }.to raise_error(ManageIQ::Password::PasswordError)
expected ManageIQ::Password::PasswordError but nothing was raised
# ./spec/tools/fix_auth/auth_model_spec.rb:84:in `block (4 levels) in <top (required)>'
Finished in 6 minutes 20 seconds (files took 23.47 seconds to load)
6594 examples, 1 failure, 1 pending
Failed examples:
rspec ./spec/tools/fix_auth/auth_model_spec.rb:83 # FixAuth::AuthModel#authentications #recrypt should raise exception for bad encryption
Randomized with seed 63041
https://travis-ci.com/github/ManageIQ/manageiq/jobs/482035822#L744
1) FixAuth::AuthConfigModel#request_tasks upgrades request (find with prefix, do not stringify keys)
Failure/Error: expect(new_options[:sysprep_domain_password]).to be_encrypted(pass)
expected: "v2:{np5Ic073+KV6linyemO2mg==}" to be encrypted and decrypt to "password"
# ./spec/tools/fix_auth/auth_config_model_spec.rb:75:in `block (3 levels) in <top (required)>'
Finished in 8 minutes 35 seconds (files took 20.11 seconds to load)
5368 examples, 1 failure, 2 pending
Failed examples:
rspec ./spec/tools/fix_auth/auth_config_model_spec.rb:67 # FixAuth::AuthConfigModel#request_tasks upgrades request (find with prefix, do not stringify keys)
Randomized with seed 20012
About this issue
- Original URL
- State: closed
- Created 3 years ago
- Comments: 23 (23 by maintainers)
Commits related to this issue
- Fix issue with fix_auth and rare key collision during recrypt This commit handles the rare case where, during recrypt, the old value is already encrypted with the new key, and when calling ManageIQ::... — committed to Fryguy/manageiq by Fryguy 3 years ago
- Fix issue with fix_auth and rare key collision during recrypt This commit handles the rare case where, during recrypt, the old value is already encrypted with the new key, and when calling ManageIQ::... — committed to Fryguy/manageiq by Fryguy 3 years ago
Awesome find @jrafanie … no ones been able to get a reproducer.
I don’t know if you’ve identified the issue causing this failure and if it’s fixed in https://github.com/ManageIQ/manageiq/pull/21178 but it’s easy enough to recreate in the
auth_config_model_spec.rblocally without PARALLEL or anything. Just crank up the count of times it runs the test and it fails most times, even multiple times.Note, I tried the same thing with the
manageiq-passwordtest suite and couldn’t get it to fail no matter how many times I forced each test to run.It does occur fairly easy with the fix_auth test though so perhaps it’s specific with this test or setup. See below.