Azure / Azure/azure-sdk-tools

Provide a pattern to wait for RBAC propagation

Open
#1,567 13 comments 0 reactions 0 assignees View on GitHub
EngSys
Dominant language
C#
Stars
135
Forks
260
Avg merge
3d 1h
Merged PRs (30d)
144

Description

We have multiple services that hit a problem where their live tests are failing because RBAC permissions were not propagated in time. We also had many ways each of them tries to solve the problem:

By waiting pre-defined amount of time: https://github.com/Azure/azure-sdk-for-net/blob/master/sdk/eventhub/test-resources-post.ps1?rgh-link-date=2021-04-21T00%3A02%3A41Z#L15-L16

Or having retry on tests: https://github.com/Azure/azure-sdk-for-net/pull/20559

To me, the goal of `New-TestResources` is to leave the test environment fully ready for the test run and non-propagated RBAC is something we should solve in a centralized way.

Contributor guide

Open the contributing guide

Research direction

Start by reading the New-TestResources flow and the linked test-resources-post.ps1 lines, then compare the retry approach discussed in pull request 20559. Define how centralized RBAC propagation handling should leave the test environment ready before live tests run; done means the affected services no longer need separate waits or test retries.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, powershell
Domain
authorization, cloud, testing
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.