You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "Geoffrey Jacoby (Jira)" <ji...@apache.org> on 2019/11/18 23:05:00 UTC

[jira] [Created] (HBASE-23316) RegionServers should refuse to load Regions with malformed coprocs, but not crash

Geoffrey Jacoby created HBASE-23316:
---------------------------------------

             Summary: RegionServers should refuse to load Regions with malformed coprocs, but not crash
                 Key: HBASE-23316
                 URL: https://issues.apache.org/jira/browse/HBASE-23316
             Project: HBase
          Issue Type: Improvement
            Reporter: Geoffrey Jacoby
            Assignee: Geoffrey Jacoby


Currently, a region server will crash if it tries to load a region with a coprocessor that is malformed (such as not being on the RS's classpath.) This can lead to a cascading "poison pill" in which  the HMaster keeps reassigning the region to different region servers, bringing down server after server and endangering the whole cluster.

We definitely can't load the Region if the coproc is wrong, but neither should that harm other, correctly configured regions on the same server. 

In this JIRA, I'll change the behavior to fail to load the region, and increment a metric for region load failures. Future JIRAs can build on this, such as by having the HMaster stop trying to load a malformed region absent user intervention after some number of retries. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)