dapr / components-contrib

Community driven, reusable components for distributed apps
Apache License 2.0
548 stars 480 forks source link

Redis Entra Id connection stops working after 24hours #3554

Open skbar50 opened 1 month ago

skbar50 commented 1 month ago

Expected Behavior

We started using Entra Id authentication to Redis with the dapr version 1.14.1. We are able to establish the connection from the AKS pod to Redis using the managed identity used by the pod. The pod runs for many days without restarting. It should be able to connect the Redis whenever there is a request from client.

Actual Behavior

However, after running for about 24hours the pod is failing to connect Redis with the error 'State operation failed: the Dapr endpoint indicated a failure. See InnerException for details. Status(StatusCode="Internal", Detail="fail to get PComSearchCacheProduct from state store statestore: ERR WRONGPASS invalid username-password pair") '

Steps to Reproduce the Problem

Run the pod that connects Redis with Entra ID authentication for more then 24hours. It will fail with the above mentioned error after about 24hours.

Additional information

The AKS pod has been working with the same Redis statestore with the password without any issue. We faced this problem when we tried to implement Entra Id authentication.

github-actions[bot] commented 4 weeks ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in the next 7 days unless it is tagged (pinned, good first issue, help wanted or triaged/resolved) or other activity occurs. Thank you for your contributions.

skbar50 commented 3 weeks ago

We are still facing the issue. It has not been resolved yet. We need a solution to this.

yaron2 commented 3 weeks ago

/nostale

swigerb commented 2 days ago

@yaron2 Any way to escalate this issue? It appears to be a timeout bug in the code and Entra ID auth to Redis fails after 24 hours. Has anyone tested Entra ID auth to Azure Redis after a pod running for 24 hours?