Skip to content

[test-dataproc] make test-dataproc-37 and -38 not race #13573

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Sep 6, 2023

Conversation

danking
Copy link
Contributor

@danking danking commented Sep 6, 2023

Consider, for example, this deploy: https://ci.hail.is/batches/7956812. test-dataproc-37 succeeded but test-dataproc-38 failed (it timed out b/c the master failed to come online).

You can see the error logs for the cluster here: https://cloudlogging.app.goo.gl/t1ux8oqy11Ba2dih7

It states a certain file either did not exist or we did not have permission to access it.

test_dataproc-37 and test_dataproc-38 started around the same time and both uploaded four files into:

gs://hail-30-day/hailctl/dataproc/ci_test_dataproc/0.2.121-7343e9c368dc/

And then set it to public read/write. The public read/write means that permissions are not the issue.

Instead, the issue is that there must be some sort of race condition in GCS which means that if you "patch" (aka overwrite) an existing file, it is possible that a concurrent reader will see the file as not existing.

Unfortunately, I cannot confirm this with audit logs of the writes and read because public objects do not generate audit logs.

Publicly available resources that have the Identity and Access Management policies allAuthenticatedUsers or allUsers don't generate audit logs. Resources that can be accessed without logging into a Google Cloud, Google Workspace, Cloud Identity, or Drive Enterprise account don't generate audit logs. This helps protect end-user identities and information.

Consider, for example, this deploy: https://ci.hail.is/batches/7956812. `test-dataproc-37` succeeded
but `test-dataproc-38` failed (it timed out b/c the master failed to come online).

You can see the error logs for the cluster here: https://cloudlogging.app.goo.gl/t1ux8oqy11Ba2dih7

It states a certain file either did not exist or we did not have permission to access it.

[`test_dataproc-37`](https://batch.hail.is/batches/7956812/jobs/193) and [`test_dataproc-38`](https://batch.hail.is/batches/7956812/jobs/194)
started around the same time and both uploaded four files into:

    gs://hail-30-day/hailctl/dataproc/ci_test_dataproc/0.2.121-7343e9c368dc/

And then set it to public read/write. The public read/write means that permissions are not the issue.

Instead, the issue is that there must be some sort of race condition in GCS which means that if you
"patch" (aka overwrite) an existing file, it is possible that a concurrent reader will see the file
as not existing.
Dan King added 2 commits September 6, 2023 17:10
CHANGELOG: Mitigate hail-is#12936 in which VEP Dataproc clusters fail to start. The root cause is complex. Docker has a bug which prevents it from cleanly starting if it is *re* installed. Whatever Google is doing in Dataproc to configure their Docker "component" appears to trigger this bug.

See for details: hail-is#12936 (comment)

The basic fix is to sleep to allow the system to coalesce a bit and then to restart Docker.
@danking
Copy link
Contributor Author

danking commented Sep 6, 2023

I merged the approved PR #13580 into this.

@danking
Copy link
Contributor Author

danking commented Sep 6, 2023

For a bit of extra confidence, I ran test-dataproc on this branch: https://ci.hail.is/batches/7960963

The clusters created successfully and the tests are running now.

@danking
Copy link
Contributor Author

danking commented Sep 6, 2023

test-dataproc passed.

@danking danking merged commit 35da6f4 into hail-is:main Sep 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants