Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow retries for encrypt/decrypt API calls #15600

Merged
merged 2 commits into from
Mar 6, 2024
Merged

Conversation

tgummerer
Copy link
Collaborator

By default our HTTP client retries all GET requests. However these post requests are also idempotent, as we just expect to encrypt/decrypt a single value, without changing anything on the server side. Retry them, so network errors won't abort the pulumi program.

There's also some log decryption events that might be retryable, but I'm not sure about them, so I left them alone for now.

Fixes #15236

By default our HTTP client retries all GET requests.  However these
post requests are also idempotent, as we just expect to
encrypt/decrypt a single value, without changing anything on the
server side.  Retry them, so network errors won't abort the pulumi
program.
@tgummerer tgummerer requested a review from a team as a code owner March 5, 2024 16:35
@tgummerer tgummerer added the impact/no-changelog-required This issue doesn't require a CHANGELOG update label Mar 5, 2024
@pulumi-bot
Copy link
Contributor

pulumi-bot commented Mar 5, 2024

Changelog

[uncommitted] (2024-03-05)

Bug Fixes

  • [backend/service] Make decrypt/encrypt network calls retryable to help work around network hiccups
    #15600

@tgummerer tgummerer removed the impact/no-changelog-required This issue doesn't require a CHANGELOG update label Mar 5, 2024
@tgummerer tgummerer added this pull request to the merge queue Mar 6, 2024
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Mar 6, 2024
@tgummerer tgummerer added this pull request to the merge queue Mar 6, 2024
Merged via the queue into master with commit 0f8e922 Mar 6, 2024
48 checks passed
@tgummerer tgummerer deleted the tg/retry-encrypt-decrypt branch March 6, 2024 09:28
github-merge-queue bot pushed a commit that referenced this pull request Mar 6, 2024
### Features

- [pkg] Make schema.NewPluginLoader respect PULUMI_DEBUG_PROVIDERS,
which enables Pulumi YAML programs to work correctly with this feature
  [#15526](#15526)

- [sdk/python] Add support for asynchronous invokes via a new
`invoke_async` function
  [#15602](#15602)

- [sdkgen/dotnet] Support for non-overlay components in codegen for
pulumi-kubernetes provider
  [#15490](#15490)


### Bug Fixes

- [backend/service] Make decrypt/encrypt network calls retryable to help
work around network hiccups
  [#15600](#15600)

- [cli/new] Strip credentials and query strings from template URLs saved
to project
  [#15586](#15586)

- [engine] Fix an issue where snapshots could become invalid when doing
a targeted up
  [#15476](#15476)

- [sdk/python] Fix determining plugins for old packages in the Python
language host
  [#15576](#15576)

- [pkg/testing] Make ProgramTest use a temporary PULUMI_HOME for each
test
  [#15568](#15568)

- [sdkgen/dotnet] Codegen fix for resources without constant input
properties
  [#15488](#15488)
@justinvp justinvp mentioned this pull request Mar 7, 2024
github-merge-queue bot pushed a commit that referenced this pull request Mar 7, 2024
Draft changelog:

### Features

- [auto/{go,nodejs,python}] Add support for suppress progress and
suppress outputs parameters in the Automation API
  [#15596](#15596)

- [pkg] Make schema.NewPluginLoader respect PULUMI_DEBUG_PROVIDERS,
which enables Pulumi YAML programs to work correctly with this feature
  [#15526](#15526)

- [sdk/dotnet] Update dotnet language host to 3.60.0
  [#15609](#15609)

- [sdk/nodejs] Add experimental support to the NodeJS SDK for the new
transforms system.
  [#15532](#15532)

- [sdk/python] Add support for asynchronous invokes via a new
`invoke_async` function
  [#15602](#15602)

- [sdkgen/dotnet] Support for non-overlay components in codegen for
pulumi-kubernetes provider
  [#15490](#15490)


### Bug Fixes

- [cli] Fix a panic when the secrets provider is missing from the
deployment snapshot
  [#15599](#15599)

- [backend/service] Make decrypt/encrypt network calls retryable to help
work around network hiccups
  [#15600](#15600)

- [cli/new] Strip credentials and query strings from template URLs saved
to project
  [#15586](#15586)

- [engine] Fix an issue where snapshots could become invalid when doing
a targeted up
  [#15476](#15476)

- [pkg/testing] Make ProgramTest use a temporary PULUMI_HOME for each
test
  [#15568](#15568)

- [sdkgen/dotnet] Codegen fix for resources without constant input
properties
  [#15488](#15488)

- [sdk/nodejs] Properly capture node:crypto and global.crypto in node
19+

- [sdk/python] Fix determining plugins for old packages in the Python
language host
  [#15576](#15576)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

integration/transformations TestNodejsTransformations/nodejs/simple is flaky
3 participants