chore: wait for name resolution

Author: olevski

scripts/init-realm/init-realm.py

@@ -24,6 +24,8 @@
 import os
 from typing import Dict, List
 
+import requests
+from requests.exceptions import ConnectionError, SSLError
 from keycloak import KeycloakAdmin
 from keycloak.exceptions import (
     KeycloakConnectionError,
@@ -35,6 +37,7 @@
 
 logging.basicConfig(level=logging.INFO)
 
+
 def _check_existing(existing_object: Dict, new_object: Dict, case, id_key) -> bool:
     """
     Compare the new object to the existing one, warn about mismatches. Return True if there are mismatches.
@@ -183,6 +186,26 @@ def _check_and_create_user(keycloak_admin, new_user):
         logging.info("done")
 
 
+def _wait_for_tls(url: str, retries=60, wait_secs=2):
+    """Keeps calling the url and waits in between retries until the name resolution and TLS works."""
+    logging.info("Waiting for name resolution and TLS.")
+    cur_retry = 1
+    while True:
+        try:
+            requests.get(url, allow_redirects=True)
+        except (ConnectionError, SSLError) as err:
+            if cur_retry >= retries:
+                raise Exception(
+                    "Timed out trying to wait for name resolution or TLS"
+                ) from err
+            logging.warning("Failed name resolution or TLS, will wait and retry.")
+            time.sleep(wait_secs)
+        else:
+            break
+        finally:
+            cur_retry += 1
+
+
 # The actual script
 
 parser = argparse.ArgumentParser()
@@ -221,14 +244,18 @@ def _check_and_create_user(keycloak_admin, new_user):
 n_attempts = 0
 success = False
 
+server_url = args.keycloak_url if args.keycloak_url.endswith("/") else args.keycloak_url + "/"
+
+_wait_for_tls(server_url)
+
 while not success and n_attempts < 31:
     try:
         logging.info("Getting an admin access token for Keycloak...")
         # NOTE: The keycloak python library does not follow redirect fully so passing in
         # "http://dev.renku.ch/auth" without the trailing "/" will fail with a 405 whereas
         # "http://dev.renku.ch/auth/" will work without a problem.
         keycloak_admin = KeycloakAdmin(
-            server_url=args.keycloak_url if args.keycloak_url.endswith("/") else args.keycloak_url + "/",
+            server_url=server_url,
             username=args.admin_user,
             password=keycloak_admin_password,
             verify=True,