retry.go 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495
  1. // Copyright 2016 The etcd Authors
  2. //
  3. // Licensed under the Apache License, Version 2.0 (the "License");
  4. // you may not use this file except in compliance with the License.
  5. // You may obtain a copy of the License at
  6. //
  7. // http://www.apache.org/licenses/LICENSE-2.0
  8. //
  9. // Unless required by applicable law or agreed to in writing, software
  10. // distributed under the License is distributed on an "AS IS" BASIS,
  11. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. // See the License for the specific language governing permissions and
  13. // limitations under the License.
  14. package clientv3
  15. import (
  16. "context"
  17. "github.com/coreos/etcd/etcdserver/api/v3rpc/rpctypes"
  18. pb "github.com/coreos/etcd/etcdserver/etcdserverpb"
  19. "google.golang.org/grpc"
  20. "google.golang.org/grpc/codes"
  21. "google.golang.org/grpc/status"
  22. )
  23. type rpcFunc func(ctx context.Context) error
  24. type retryRPCFunc func(context.Context, rpcFunc) error
  25. type retryStopErrFunc func(error) bool
  26. func isRepeatableStopError(err error) bool {
  27. eErr := rpctypes.Error(err)
  28. // always stop retry on etcd errors
  29. if serverErr, ok := eErr.(rpctypes.EtcdError); ok && serverErr.Code() != codes.Unavailable {
  30. return true
  31. }
  32. // only retry if unavailable
  33. ev, _ := status.FromError(err)
  34. return ev.Code() != codes.Unavailable
  35. }
  36. func isNonRepeatableStopError(err error) bool {
  37. ev, _ := status.FromError(err)
  38. if ev.Code() != codes.Unavailable {
  39. return true
  40. }
  41. return rpctypes.ErrorDesc(err) != "there is no address available"
  42. }
  43. func (c *Client) newRetryWrapper(isStop retryStopErrFunc) retryRPCFunc {
  44. return func(rpcCtx context.Context, f rpcFunc) error {
  45. for {
  46. if err := readyWait(rpcCtx, c.ctx, c.balancer.ConnectNotify()); err != nil {
  47. return err
  48. }
  49. pinned := c.balancer.pinned()
  50. err := f(rpcCtx)
  51. if err == nil {
  52. return nil
  53. }
  54. if logger.V(4) {
  55. logger.Infof("clientv3/retry: error %q on pinned endpoint %q", err.Error(), pinned)
  56. }
  57. if s, ok := status.FromError(err); ok && (s.Code() == codes.Unavailable || s.Code() == codes.DeadlineExceeded || s.Code() == codes.Internal) {
  58. // mark this before endpoint switch is triggered
  59. c.balancer.hostPortError(pinned, err)
  60. c.balancer.next()
  61. if logger.V(4) {
  62. logger.Infof("clientv3/retry: switching from %q due to error %q", pinned, err.Error())
  63. }
  64. }
  65. if isStop(err) {
  66. return err
  67. }
  68. }
  69. }
  70. }
  71. func (c *Client) newAuthRetryWrapper() retryRPCFunc {
  72. return func(rpcCtx context.Context, f rpcFunc) error {
  73. for {
  74. pinned := c.balancer.pinned()
  75. err := f(rpcCtx)
  76. if err == nil {
  77. return nil
  78. }
  79. if logger.V(4) {
  80. logger.Infof("clientv3/auth-retry: error %q on pinned endpoint %q", err.Error(), pinned)
  81. }
  82. // always stop retry on etcd errors other than invalid auth token
  83. if rpctypes.Error(err) == rpctypes.ErrInvalidAuthToken {
  84. gterr := c.getToken(rpcCtx)
  85. if gterr != nil {
  86. if logger.V(4) {
  87. logger.Infof("clientv3/auth-retry: cannot retry due to error %q(%q) on pinned endpoint %q", err.Error(), gterr.Error(), pinned)
  88. }
  89. return err // return the original error for simplicity
  90. }
  91. continue
  92. }
  93. return err
  94. }
  95. }
  96. }
  97. // RetryKVClient implements a KVClient.
  98. func RetryKVClient(c *Client) pb.KVClient {
  99. repeatableRetry := c.newRetryWrapper(isRepeatableStopError)
  100. nonRepeatableRetry := c.newRetryWrapper(isNonRepeatableStopError)
  101. conn := pb.NewKVClient(c.conn)
  102. retryBasic := &retryKVClient{&nonRepeatableKVClient{conn, nonRepeatableRetry}, repeatableRetry}
  103. retryAuthWrapper := c.newAuthRetryWrapper()
  104. return &retryKVClient{
  105. &nonRepeatableKVClient{retryBasic, retryAuthWrapper},
  106. retryAuthWrapper}
  107. }
  108. type retryKVClient struct {
  109. *nonRepeatableKVClient
  110. repeatableRetry retryRPCFunc
  111. }
  112. func (rkv *retryKVClient) Range(ctx context.Context, in *pb.RangeRequest, opts ...grpc.CallOption) (resp *pb.RangeResponse, err error) {
  113. err = rkv.repeatableRetry(ctx, func(rctx context.Context) error {
  114. resp, err = rkv.kc.Range(rctx, in, opts...)
  115. return err
  116. })
  117. return resp, err
  118. }
  119. type nonRepeatableKVClient struct {
  120. kc pb.KVClient
  121. nonRepeatableRetry retryRPCFunc
  122. }
  123. func (rkv *nonRepeatableKVClient) Put(ctx context.Context, in *pb.PutRequest, opts ...grpc.CallOption) (resp *pb.PutResponse, err error) {
  124. err = rkv.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  125. resp, err = rkv.kc.Put(rctx, in, opts...)
  126. return err
  127. })
  128. return resp, err
  129. }
  130. func (rkv *nonRepeatableKVClient) DeleteRange(ctx context.Context, in *pb.DeleteRangeRequest, opts ...grpc.CallOption) (resp *pb.DeleteRangeResponse, err error) {
  131. err = rkv.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  132. resp, err = rkv.kc.DeleteRange(rctx, in, opts...)
  133. return err
  134. })
  135. return resp, err
  136. }
  137. func (rkv *nonRepeatableKVClient) Txn(ctx context.Context, in *pb.TxnRequest, opts ...grpc.CallOption) (resp *pb.TxnResponse, err error) {
  138. // TODO: repeatableRetry if read-only txn
  139. err = rkv.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  140. resp, err = rkv.kc.Txn(rctx, in, opts...)
  141. return err
  142. })
  143. return resp, err
  144. }
  145. func (rkv *nonRepeatableKVClient) Compact(ctx context.Context, in *pb.CompactionRequest, opts ...grpc.CallOption) (resp *pb.CompactionResponse, err error) {
  146. err = rkv.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  147. resp, err = rkv.kc.Compact(rctx, in, opts...)
  148. return err
  149. })
  150. return resp, err
  151. }
  152. type retryLeaseClient struct {
  153. lc pb.LeaseClient
  154. repeatableRetry retryRPCFunc
  155. }
  156. // RetryLeaseClient implements a LeaseClient.
  157. func RetryLeaseClient(c *Client) pb.LeaseClient {
  158. retry := &retryLeaseClient{
  159. pb.NewLeaseClient(c.conn),
  160. c.newRetryWrapper(isRepeatableStopError),
  161. }
  162. return &retryLeaseClient{retry, c.newAuthRetryWrapper()}
  163. }
  164. func (rlc *retryLeaseClient) LeaseTimeToLive(ctx context.Context, in *pb.LeaseTimeToLiveRequest, opts ...grpc.CallOption) (resp *pb.LeaseTimeToLiveResponse, err error) {
  165. err = rlc.repeatableRetry(ctx, func(rctx context.Context) error {
  166. resp, err = rlc.lc.LeaseTimeToLive(rctx, in, opts...)
  167. return err
  168. })
  169. return resp, err
  170. }
  171. func (rlc *retryLeaseClient) LeaseLeases(ctx context.Context, in *pb.LeaseLeasesRequest, opts ...grpc.CallOption) (resp *pb.LeaseLeasesResponse, err error) {
  172. err = rlc.repeatableRetry(ctx, func(rctx context.Context) error {
  173. resp, err = rlc.lc.LeaseLeases(rctx, in, opts...)
  174. return err
  175. })
  176. return resp, err
  177. }
  178. func (rlc *retryLeaseClient) LeaseGrant(ctx context.Context, in *pb.LeaseGrantRequest, opts ...grpc.CallOption) (resp *pb.LeaseGrantResponse, err error) {
  179. err = rlc.repeatableRetry(ctx, func(rctx context.Context) error {
  180. resp, err = rlc.lc.LeaseGrant(rctx, in, opts...)
  181. return err
  182. })
  183. return resp, err
  184. }
  185. func (rlc *retryLeaseClient) LeaseRevoke(ctx context.Context, in *pb.LeaseRevokeRequest, opts ...grpc.CallOption) (resp *pb.LeaseRevokeResponse, err error) {
  186. err = rlc.repeatableRetry(ctx, func(rctx context.Context) error {
  187. resp, err = rlc.lc.LeaseRevoke(rctx, in, opts...)
  188. return err
  189. })
  190. return resp, err
  191. }
  192. func (rlc *retryLeaseClient) LeaseKeepAlive(ctx context.Context, opts ...grpc.CallOption) (stream pb.Lease_LeaseKeepAliveClient, err error) {
  193. err = rlc.repeatableRetry(ctx, func(rctx context.Context) error {
  194. stream, err = rlc.lc.LeaseKeepAlive(rctx, opts...)
  195. return err
  196. })
  197. return stream, err
  198. }
  199. type retryClusterClient struct {
  200. *nonRepeatableClusterClient
  201. repeatableRetry retryRPCFunc
  202. }
  203. // RetryClusterClient implements a ClusterClient.
  204. func RetryClusterClient(c *Client) pb.ClusterClient {
  205. repeatableRetry := c.newRetryWrapper(isRepeatableStopError)
  206. nonRepeatableRetry := c.newRetryWrapper(isNonRepeatableStopError)
  207. cc := pb.NewClusterClient(c.conn)
  208. return &retryClusterClient{&nonRepeatableClusterClient{cc, nonRepeatableRetry}, repeatableRetry}
  209. }
  210. func (rcc *retryClusterClient) MemberList(ctx context.Context, in *pb.MemberListRequest, opts ...grpc.CallOption) (resp *pb.MemberListResponse, err error) {
  211. err = rcc.repeatableRetry(ctx, func(rctx context.Context) error {
  212. resp, err = rcc.cc.MemberList(rctx, in, opts...)
  213. return err
  214. })
  215. return resp, err
  216. }
  217. type nonRepeatableClusterClient struct {
  218. cc pb.ClusterClient
  219. nonRepeatableRetry retryRPCFunc
  220. }
  221. func (rcc *nonRepeatableClusterClient) MemberAdd(ctx context.Context, in *pb.MemberAddRequest, opts ...grpc.CallOption) (resp *pb.MemberAddResponse, err error) {
  222. err = rcc.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  223. resp, err = rcc.cc.MemberAdd(rctx, in, opts...)
  224. return err
  225. })
  226. return resp, err
  227. }
  228. func (rcc *nonRepeatableClusterClient) MemberRemove(ctx context.Context, in *pb.MemberRemoveRequest, opts ...grpc.CallOption) (resp *pb.MemberRemoveResponse, err error) {
  229. err = rcc.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  230. resp, err = rcc.cc.MemberRemove(rctx, in, opts...)
  231. return err
  232. })
  233. return resp, err
  234. }
  235. func (rcc *nonRepeatableClusterClient) MemberUpdate(ctx context.Context, in *pb.MemberUpdateRequest, opts ...grpc.CallOption) (resp *pb.MemberUpdateResponse, err error) {
  236. err = rcc.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  237. resp, err = rcc.cc.MemberUpdate(rctx, in, opts...)
  238. return err
  239. })
  240. return resp, err
  241. }
  242. // RetryMaintenanceClient implements a Maintenance.
  243. func RetryMaintenanceClient(c *Client, conn *grpc.ClientConn) pb.MaintenanceClient {
  244. repeatableRetry := c.newRetryWrapper(isRepeatableStopError)
  245. nonRepeatableRetry := c.newRetryWrapper(isNonRepeatableStopError)
  246. mc := pb.NewMaintenanceClient(conn)
  247. return &retryMaintenanceClient{&nonRepeatableMaintenanceClient{mc, nonRepeatableRetry}, repeatableRetry}
  248. }
  249. type retryMaintenanceClient struct {
  250. *nonRepeatableMaintenanceClient
  251. repeatableRetry retryRPCFunc
  252. }
  253. func (rmc *retryMaintenanceClient) Alarm(ctx context.Context, in *pb.AlarmRequest, opts ...grpc.CallOption) (resp *pb.AlarmResponse, err error) {
  254. err = rmc.repeatableRetry(ctx, func(rctx context.Context) error {
  255. resp, err = rmc.mc.Alarm(rctx, in, opts...)
  256. return err
  257. })
  258. return resp, err
  259. }
  260. func (rmc *retryMaintenanceClient) Status(ctx context.Context, in *pb.StatusRequest, opts ...grpc.CallOption) (resp *pb.StatusResponse, err error) {
  261. err = rmc.repeatableRetry(ctx, func(rctx context.Context) error {
  262. resp, err = rmc.mc.Status(rctx, in, opts...)
  263. return err
  264. })
  265. return resp, err
  266. }
  267. func (rmc *retryMaintenanceClient) Hash(ctx context.Context, in *pb.HashRequest, opts ...grpc.CallOption) (resp *pb.HashResponse, err error) {
  268. err = rmc.repeatableRetry(ctx, func(rctx context.Context) error {
  269. resp, err = rmc.mc.Hash(rctx, in, opts...)
  270. return err
  271. })
  272. return resp, err
  273. }
  274. func (rmc *retryMaintenanceClient) HashKV(ctx context.Context, in *pb.HashKVRequest, opts ...grpc.CallOption) (resp *pb.HashKVResponse, err error) {
  275. err = rmc.repeatableRetry(ctx, func(rctx context.Context) error {
  276. resp, err = rmc.mc.HashKV(rctx, in, opts...)
  277. return err
  278. })
  279. return resp, err
  280. }
  281. func (rmc *retryMaintenanceClient) Snapshot(ctx context.Context, in *pb.SnapshotRequest, opts ...grpc.CallOption) (stream pb.Maintenance_SnapshotClient, err error) {
  282. err = rmc.repeatableRetry(ctx, func(rctx context.Context) error {
  283. stream, err = rmc.mc.Snapshot(rctx, in, opts...)
  284. return err
  285. })
  286. return stream, err
  287. }
  288. func (rmc *retryMaintenanceClient) MoveLeader(ctx context.Context, in *pb.MoveLeaderRequest, opts ...grpc.CallOption) (resp *pb.MoveLeaderResponse, err error) {
  289. err = rmc.repeatableRetry(ctx, func(rctx context.Context) error {
  290. resp, err = rmc.mc.MoveLeader(rctx, in, opts...)
  291. return err
  292. })
  293. return resp, err
  294. }
  295. type nonRepeatableMaintenanceClient struct {
  296. mc pb.MaintenanceClient
  297. nonRepeatableRetry retryRPCFunc
  298. }
  299. func (rmc *nonRepeatableMaintenanceClient) Defragment(ctx context.Context, in *pb.DefragmentRequest, opts ...grpc.CallOption) (resp *pb.DefragmentResponse, err error) {
  300. err = rmc.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  301. resp, err = rmc.mc.Defragment(rctx, in, opts...)
  302. return err
  303. })
  304. return resp, err
  305. }
  306. type retryAuthClient struct {
  307. *nonRepeatableAuthClient
  308. repeatableRetry retryRPCFunc
  309. }
  310. // RetryAuthClient implements a AuthClient.
  311. func RetryAuthClient(c *Client) pb.AuthClient {
  312. repeatableRetry := c.newRetryWrapper(isRepeatableStopError)
  313. nonRepeatableRetry := c.newRetryWrapper(isNonRepeatableStopError)
  314. ac := pb.NewAuthClient(c.conn)
  315. return &retryAuthClient{&nonRepeatableAuthClient{ac, nonRepeatableRetry}, repeatableRetry}
  316. }
  317. func (rac *retryAuthClient) UserList(ctx context.Context, in *pb.AuthUserListRequest, opts ...grpc.CallOption) (resp *pb.AuthUserListResponse, err error) {
  318. err = rac.repeatableRetry(ctx, func(rctx context.Context) error {
  319. resp, err = rac.ac.UserList(rctx, in, opts...)
  320. return err
  321. })
  322. return resp, err
  323. }
  324. func (rac *retryAuthClient) UserGet(ctx context.Context, in *pb.AuthUserGetRequest, opts ...grpc.CallOption) (resp *pb.AuthUserGetResponse, err error) {
  325. err = rac.repeatableRetry(ctx, func(rctx context.Context) error {
  326. resp, err = rac.ac.UserGet(rctx, in, opts...)
  327. return err
  328. })
  329. return resp, err
  330. }
  331. func (rac *retryAuthClient) RoleGet(ctx context.Context, in *pb.AuthRoleGetRequest, opts ...grpc.CallOption) (resp *pb.AuthRoleGetResponse, err error) {
  332. err = rac.repeatableRetry(ctx, func(rctx context.Context) error {
  333. resp, err = rac.ac.RoleGet(rctx, in, opts...)
  334. return err
  335. })
  336. return resp, err
  337. }
  338. func (rac *retryAuthClient) RoleList(ctx context.Context, in *pb.AuthRoleListRequest, opts ...grpc.CallOption) (resp *pb.AuthRoleListResponse, err error) {
  339. err = rac.repeatableRetry(ctx, func(rctx context.Context) error {
  340. resp, err = rac.ac.RoleList(rctx, in, opts...)
  341. return err
  342. })
  343. return resp, err
  344. }
  345. type nonRepeatableAuthClient struct {
  346. ac pb.AuthClient
  347. nonRepeatableRetry retryRPCFunc
  348. }
  349. func (rac *nonRepeatableAuthClient) AuthEnable(ctx context.Context, in *pb.AuthEnableRequest, opts ...grpc.CallOption) (resp *pb.AuthEnableResponse, err error) {
  350. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  351. resp, err = rac.ac.AuthEnable(rctx, in, opts...)
  352. return err
  353. })
  354. return resp, err
  355. }
  356. func (rac *nonRepeatableAuthClient) AuthDisable(ctx context.Context, in *pb.AuthDisableRequest, opts ...grpc.CallOption) (resp *pb.AuthDisableResponse, err error) {
  357. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  358. resp, err = rac.ac.AuthDisable(rctx, in, opts...)
  359. return err
  360. })
  361. return resp, err
  362. }
  363. func (rac *nonRepeatableAuthClient) UserAdd(ctx context.Context, in *pb.AuthUserAddRequest, opts ...grpc.CallOption) (resp *pb.AuthUserAddResponse, err error) {
  364. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  365. resp, err = rac.ac.UserAdd(rctx, in, opts...)
  366. return err
  367. })
  368. return resp, err
  369. }
  370. func (rac *nonRepeatableAuthClient) UserDelete(ctx context.Context, in *pb.AuthUserDeleteRequest, opts ...grpc.CallOption) (resp *pb.AuthUserDeleteResponse, err error) {
  371. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  372. resp, err = rac.ac.UserDelete(rctx, in, opts...)
  373. return err
  374. })
  375. return resp, err
  376. }
  377. func (rac *nonRepeatableAuthClient) UserChangePassword(ctx context.Context, in *pb.AuthUserChangePasswordRequest, opts ...grpc.CallOption) (resp *pb.AuthUserChangePasswordResponse, err error) {
  378. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  379. resp, err = rac.ac.UserChangePassword(rctx, in, opts...)
  380. return err
  381. })
  382. return resp, err
  383. }
  384. func (rac *nonRepeatableAuthClient) UserGrantRole(ctx context.Context, in *pb.AuthUserGrantRoleRequest, opts ...grpc.CallOption) (resp *pb.AuthUserGrantRoleResponse, err error) {
  385. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  386. resp, err = rac.ac.UserGrantRole(rctx, in, opts...)
  387. return err
  388. })
  389. return resp, err
  390. }
  391. func (rac *nonRepeatableAuthClient) UserRevokeRole(ctx context.Context, in *pb.AuthUserRevokeRoleRequest, opts ...grpc.CallOption) (resp *pb.AuthUserRevokeRoleResponse, err error) {
  392. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  393. resp, err = rac.ac.UserRevokeRole(rctx, in, opts...)
  394. return err
  395. })
  396. return resp, err
  397. }
  398. func (rac *nonRepeatableAuthClient) RoleAdd(ctx context.Context, in *pb.AuthRoleAddRequest, opts ...grpc.CallOption) (resp *pb.AuthRoleAddResponse, err error) {
  399. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  400. resp, err = rac.ac.RoleAdd(rctx, in, opts...)
  401. return err
  402. })
  403. return resp, err
  404. }
  405. func (rac *nonRepeatableAuthClient) RoleDelete(ctx context.Context, in *pb.AuthRoleDeleteRequest, opts ...grpc.CallOption) (resp *pb.AuthRoleDeleteResponse, err error) {
  406. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  407. resp, err = rac.ac.RoleDelete(rctx, in, opts...)
  408. return err
  409. })
  410. return resp, err
  411. }
  412. func (rac *nonRepeatableAuthClient) RoleGrantPermission(ctx context.Context, in *pb.AuthRoleGrantPermissionRequest, opts ...grpc.CallOption) (resp *pb.AuthRoleGrantPermissionResponse, err error) {
  413. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  414. resp, err = rac.ac.RoleGrantPermission(rctx, in, opts...)
  415. return err
  416. })
  417. return resp, err
  418. }
  419. func (rac *nonRepeatableAuthClient) RoleRevokePermission(ctx context.Context, in *pb.AuthRoleRevokePermissionRequest, opts ...grpc.CallOption) (resp *pb.AuthRoleRevokePermissionResponse, err error) {
  420. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  421. resp, err = rac.ac.RoleRevokePermission(rctx, in, opts...)
  422. return err
  423. })
  424. return resp, err
  425. }
  426. func (rac *nonRepeatableAuthClient) Authenticate(ctx context.Context, in *pb.AuthenticateRequest, opts ...grpc.CallOption) (resp *pb.AuthenticateResponse, err error) {
  427. err = rac.nonRepeatableRetry(ctx, func(rctx context.Context) error {
  428. resp, err = rac.ac.Authenticate(rctx, in, opts...)
  429. return err
  430. })
  431. return resp, err
  432. }