Retry the key-state check in test_ksr_fast

named updates the state file asynchronously; one read can race it.

Assisted-by: Claude:claude-opus-4-8
(cherry picked from commit a5a0dedfbc)
This commit is contained in:
Michal Nowak 2026-06-02 14:53:25 +00:00 committed by Michal Nowak (GitLab job 7586223)
parent bd6ca980a1
commit 35787efdcc

View file

@ -1439,8 +1439,15 @@ def test_ksr_fast(ns1):
isctest.kasp.check_dnssecstatus(ns1, zone, zsks, policy=policy)
# - dnssec_verify
isctest.kasp.check_dnssec_verify(ns1, zone)
# - check keys
check_keys(zsks, lifetime, FASTCONFIG, with_state=True)
# named updates the state file asynchronously, so retry the state check
# until the rumoured -> omnipresent transition catches up.
def check_keys_state():
check_keys(zsks, lifetime, FASTCONFIG, with_state=True)
return True
isctest.run.retry_with_timeout(check_keys_state, timeout=30)
# - check apex
isctest.kasp.check_apex(ns1, zone, ksks, zsks, offline_ksk=True)
# - check subdomain