Retry the key-state check in test_ksr_fast

named updates the state file asynchronously; one read can race it.

Assisted-by: Claude:claude-opus-4-8
This commit is contained in:
Michal Nowak 2026-06-02 14:53:25 +00:00
parent a7d1207324
commit a5a0dedfbc

View file

@ -1457,8 +1457,15 @@ def test_ksr_fast(ns1):
isctest.kasp.check_dnssecstatus(ns1, zone, zsks, policy=policy, verbose=True)
# - dnssec_verify
isctest.kasp.check_dnssec_verify(ns1, zone)
# - check keys
check_keys(zsks, lifetime, FASTCONFIG, with_state=True)
# named updates the state file asynchronously, so retry the state check
# until the rumoured -> omnipresent transition catches up.
def check_keys_state():
check_keys(zsks, lifetime, FASTCONFIG, with_state=True)
return True
isctest.run.retry_with_timeout(check_keys_state, timeout=30)
# - check apex
isctest.kasp.check_apex(ns1, zone, ksks, zsks, offline_ksk=True)
# - check subdomain