{"record":{"id":"ad01c38b49c3bbc3","repo":"grafana/k6","slug":"status-code-d-w","errorCode":null,"errorMessage":"status code %d: %w","messagePattern":"status code (.+?): %w","errorType":"http","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/secretsource/url/url.go","lineNumber":194,"sourceCode":"\t\treq, err := http.NewRequestWithContext(ctx, us.config.Method.String, url, nil)\n\t\tif err != nil {\n\t\t\treturn fmt.Errorf(\"failed to create request: %w\", err), true\n\t\t}\n\n\t\t// Add headers\n\t\tfor k, v := range us.config.Headers {\n\t\t\treq.Header.Set(k, v)\n\t\t}\n\n\t\tresponse, err := us.httpClient.Do(req) //nolint:gosec\n\t\tif err != nil {\n\t\t\t// Network errors are retryable\n\t\t\treturn fmt.Errorf(\"failed to get secret: %w\", err), true\n\t\t}\n\t\tdefer func() { _ = response.Body.Close() }()\n\n\t\tif response.StatusCode != http.StatusOK {\n\t\t\tstatusErr := fmt.Errorf(\"status code %d: %w\", response.StatusCode, errFailedToGetSecret)\n\n\t\t\t// Retry on server errors (5xx) and rate limiting (429)\n\t\t\t// Don't retry on client errors (4xx except 429)\n\t\t\tretryable := response.StatusCode >= 500 || response.StatusCode == http.StatusTooManyRequests\n\t\t\treturn statusErr, retryable\n\t\t}\n\n\t\t// Extract secret value from response\n\t\textractedSecret, err := extractSecretFromResponse(response.Body, us.config.ResponsePath.String)\n\t\tif err != nil {\n\t\t\t// Extraction errors are not retryable (indicates config issue)\n\t\t\treturn fmt.Errorf(\"failed to extract secret: %w\", err), false\n\t\t}\n\n\t\tsecret = extractedSecret\n\t\treturn nil, false\n\t})\n\tif err != nil {","sourceCodeStart":176,"sourceCodeEnd":212,"githubUrl":"https://github.com/grafana/k6/blob/01ffac6f245854c1b8adc6a69857c76a15f90022/internal/secretsource/url/url.go#L176-L212","documentation":"urlSecrets.Get requires HTTP 200 from the secret server; any other status wraps errFailedToGetSecret with the actual status code here. The response body will not be used as a secret and the failure may be retried until attempts are exhausted.","triggerScenarios":"Thrown at internal/secretsource/url/url.go:194 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["For 401/403, fix the Authorization header or token configuration","For 404, verify the secret key and URL template are correct","For 429/5xx the source retries automatically — check service health and rate limits"],"exampleFix":null,"handlingStrategy":"retry","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"01ffac6f245854c1b8adc6a69857c76a15f90022","analyzedAt":"2026-08-18T03:05:52.393Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}