{"record":{"id":"027f8c7b7676bc34","repo":"grafana/k6","slug":"failed-to-get-secret-w","errorCode":null,"errorMessage":"failed to get secret: %w","messagePattern":"failed to get secret: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/secretsource/url/url.go","lineNumber":189,"sourceCode":"\n\terr := retry(ctx, maxAttempts, backoff, us.logger, func() (error, bool) {\n\t\t// Replace {key} placeholder in URL template\n\t\turl := strings.ReplaceAll(us.config.URLTemplate, \"{key}\", key)\n\n\t\treq, err := http.NewRequestWithContext(ctx, us.config.Method.String, url, nil)\n\t\tif err != nil {\n\t\t\treturn fmt.Errorf(\"failed to create request: %w\", err), true\n\t\t}\n\n\t\t// Add headers\n\t\tfor k, v := range us.config.Headers {\n\t\t\treq.Header.Set(k, v)\n\t\t}\n\n\t\tresponse, err := us.httpClient.Do(req) //nolint:gosec\n\t\tif err != nil {\n\t\t\t// Network errors are retryable\n\t\t\treturn fmt.Errorf(\"failed to get secret: %w\", err), true\n\t\t}\n\t\tdefer func() { _ = response.Body.Close() }()\n\n\t\tif response.StatusCode != http.StatusOK {\n\t\t\tstatusErr := fmt.Errorf(\"status code %d: %w\", response.StatusCode, errFailedToGetSecret)\n\n\t\t\t// Retry on server errors (5xx) and rate limiting (429)\n\t\t\t// Don't retry on client errors (4xx except 429)\n\t\t\tretryable := response.StatusCode >= 500 || response.StatusCode == http.StatusTooManyRequests\n\t\t\treturn statusErr, retryable\n\t\t}\n\n\t\t// Extract secret value from response\n\t\textractedSecret, err := extractSecretFromResponse(response.Body, us.config.ResponsePath.String)\n\t\tif err != nil {\n\t\t\t// Extraction errors are not retryable (indicates config issue)\n\t\t\treturn fmt.Errorf(\"failed to extract secret: %w\", err), false\n\t\t}","sourceCodeStart":171,"sourceCodeEnd":207,"githubUrl":"https://github.com/grafana/k6/blob/01ffac6f245854c1b8adc6a69857c76a15f90022/internal/secretsource/url/url.go#L171-L207","documentation":"Inside the retry loop of urlSecrets.Get, the HTTP request to the configured URL template (with {key} substituted) failed at the network level — DNS, connection, TLS, timeout. It is marked retryable, so this error is only returned to the caller if all retry attempts fail.","triggerScenarios":"Thrown at internal/secretsource/url/url.go:189 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify the secret service URL is reachable from the k6 host","Check TLS/proxy settings and network connectivity","Tune maxRetries and retryBackoff if the service is flaky"],"exampleFix":null,"handlingStrategy":"retry","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"01ffac6f245854c1b8adc6a69857c76a15f90022","analyzedAt":"2026-08-18T03:05:52.393Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}