basalt-26.3.2-rc-20260908: security/oidcauth: TestOIDCProvisioning failed

security/oidcauth.TestOIDCProvisioning [failed](https://mesolite.cluster.engflow.com/invocations/default/154a6740-7ddc-4b24-b932-f3322ce63402?testReportRun=2&testReportShard=1&testReportAttempt=1#targets-Ly9wa2cvc2VjdXJpdHkvb2lkY2F1dGg6b2lkY2F1dGhfdGVzdA==) on basalt-26.3.2-rc-20260908 @ [807558e5e81666af257c811e925e4cae570abc28](https://github.com/cockroachdb/cockroach/commits/807558e5e81666af257c811e925e4cae570abc28):

```
=== RUN TestOIDCProvisioning
test_log_scope.go:172: test logs captured to: outputs.zip/logTestOIDCProvisioning504997684
test_log_scope.go:82: use -show-logs to present logs inline
test_server_shim.go:168: automatically injected an external process virtual cluster under test; see comment at top of test_server_shim.go for details.
authentication_oidc_test.go:1088: -- test log scope end --
test logs left over in: outputs.zip/logTestOIDCProvisioning504997684
--- FAIL: TestOIDCProvisioning (303.83s)
=== RUN TestOIDCProvisioning/provisioning_enabled,_new_user
authentication_oidc_test.go:941:
Error Trace: pkg/security/oidcauth/authentication_oidc_test.go:941
Error: Received unexpected error:
Get "https://127.0.0.1:38669/base/path/for/provisioning": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
Test: TestOIDCProvisioning/provisioning_enabled,_new_user
--- FAIL: TestOIDCProvisioning/provisioning_enabled,_new_user (72.47s)
```

Parameters:
- attempt=1
- race=true
- run=2
- shard=1
Help

See also: [How To Investigate a Go Test Failure \(internal\)](https://cockroachlabs.atlassian.net/l/c/HgfXfJgM)

Same failure on other branches

- #174355 security/oidcauth: TestOIDCProvisioning failed [C-test-failure O-robot T-product-security branch-master]

/cc @cockroachlabs/product-security

[This test on roachdash](https://roachdash.crdb.dev/?filter=status:open%20t:.*TestOIDCProvisioning.*&sort=title+created&display=lastcommented+project) | [Improve this report!](https://github.com/cockroachdb/cockroach/tree/master/pkg/cmd/bazci/githubpost/issues)

Start with security/oidcauth.TestOIDCProvisioning in pkg/security/oidcauth/authentication_oidc_test.go, especially the failure at line 941, and reproduce the provisioning_enabled, new_user case with race enabled. Inspect the captured outputs.zip/logTestOIDCProvisioning504997684 logs and the linked test report to determine why the provisioning request times out. Done means the test passes reliably on the affected branch.

Written by the indexing model from the issue text.