You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/04/14 08:52:26 UTC
[GitHub] [pulsar] lordcheng10 opened a new pull request, #15170: support dynamic config for authenticationEnabled
lordcheng10 opened a new pull request, #15170:
URL: https://github.com/apache/pulsar/pull/15170
### Motivation
When we want to enable authentication on an already running cluster, the broker must be restarted in rotation. During the rotation restart, the connection between the authenticated broker and the temporarily unauthenticated broker may be abnormal.
### Documentation
Check the box below or label this PR directly.
Need to update docs?
- [ ] `doc-required`
(Your PR needs to update docs and you will update later)
- [x] `no-need-doc`
(Please explain why)
- [ ] `doc`
(Your PR contains doc changes)
- [ ] `doc-added`
(Docs have been already added)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099142414
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] liudezhi2098 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
liudezhi2098 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1098905559
If authenticationEnabled in broker , the client also needs to enable the authentication configuration, which is currently not automatic, so dynamic config for authenticationEnabled may doesn't solve the problem.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099003353
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099118362
> > So our upgrade process is:
> >
> > 1. The client restarts in turn to enable the authentication configuration;
> > 2. After the client completes the upgrade, it will restart the broker in turn to enable the authentication of the broker, but at this time, in order to prevent the connection between the brokers from being abnormal during the rotational restart process, it is necessary to configure: authenticationEnabled=false
> > 3. After the broker is upgraded, change the configuration through dynamic settings: authenticationEnabled=true
>
> Make sense to me. You can put this in the motivation part.
OK
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] Jason918 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
Jason918 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099105539
> So our upgrade process is:
>
> 1. The client restarts in turn to enable the authentication configuration;
> 2. After the client completes the upgrade, it will restart the broker in turn to enable the authentication of the broker, but at this time, in order to prevent the connection between the brokers from being abnormal during the rotational restart process, it is necessary to configure: authenticationEnabled=false
> 3. After the broker is upgraded, change the configuration through dynamic settings: authenticationEnabled=true
Make sense to me. You can put this in the motivation part.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099154826
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099829243
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099824706
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 closed pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 closed pull request #15170: support dynamic config for authenticationEnabled
URL: https://github.com/apache/pulsar/pull/15170
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1098954560
> If authenticationEnabled in broker , the client also needs to enable the authentication configuration, which is currently not automatic, so dynamic config for authenticationEnabled may doesn't solve the problem.
We have a scenario where the client doesn't want to stop all.
So our upgrade process is:
1. The client restarts in turn to enable the authentication configuration;
2. After the client completes the upgrade, it will restart the broker in turn to enable the authentication of the broker, but at this time, in order to prevent the connection between the brokers from being abnormal during the rotational restart process, it is necessary to configure: authenticationEnabled=false
3. After the broker is upgraded, change the configuration through dynamic settings: authenticationEnabled=true
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099010348
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099063614
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lordcheng10 commented on pull request #15170: support dynamic config for authenticationEnabled
Posted by GitBox <gi...@apache.org>.
lordcheng10 commented on PR #15170:
URL: https://github.com/apache/pulsar/pull/15170#issuecomment-1099224594
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org