You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by GitBox <gi...@apache.org> on 2021/06/15 17:09:12 UTC
[GitHub] [kafka] rondagostino opened a new pull request #10886: MINOR: TestSecurityRollingUpgrade system test fixes
rondagostino opened a new pull request #10886:
URL: https://github.com/apache/kafka/pull/10886
The `TestSecurityRollingUpgrade. test_disable_separate_interbroker_listener()` system test had a design flaw: it was migrating inter-broker communication from a SASL_SSL listener to an SSL listener in one roll while immediately removing the SASL_SSL listener in that roll. This requires two rolls because the existing SASL_SSL listener must remain available throughout the first roll so that unrolled brokers can continue to communicate with rolled brokers throughout. This patch adds the second roll to this test and removes the original SASL_SSL listener on that second roll instead of the first one. The test was not failing all the time -- it was flaky.
The `TestSecurityRollingUpgrade.test_rolling_upgrade_phase_two()` system test was not explicitly identifying the SASL mechanism to enable on a third port when that port was using SASL but the client security protocol was not SASL-based. This was resulting in an empty `sasl.enabled.mechanisms` config, which applied to that third port, and then when the cluster was rolled to take advantage of this third port for inter-broker communication the potential for an inability to communicate with other, unrolled brokers existed (similar to above, this resulted in a flaky test).
### Committer Checklist (excluded from commit message)
- [ ] Verify design and implementation
- [ ] Verify test coverage and CI build status
- [ ] Verify documentation (including upgrade notes)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [kafka] rondagostino commented on pull request #10886: MINOR: TestSecurityRollingUpgrade system test fixes
Posted by GitBox <gi...@apache.org>.
rondagostino commented on pull request #10886:
URL: https://github.com/apache/kafka/pull/10886#issuecomment-861682744
I've kicked off system tests for the affected file and will post results here when it completes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [kafka] chia7712 merged pull request #10886: MINOR: TestSecurityRollingUpgrade system test fixes
Posted by GitBox <gi...@apache.org>.
chia7712 merged pull request #10886:
URL: https://github.com/apache/kafka/pull/10886
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [kafka] rondagostino commented on pull request #10886: MINOR: TestSecurityRollingUpgrade system test fixes
Posted by GitBox <gi...@apache.org>.
rondagostino commented on pull request #10886:
URL: https://github.com/apache/kafka/pull/10886#issuecomment-861793780
https://confluent-kafka-branch-builder-system-test-results.s3-us-west-2.amazonaws.com/2021-06-15--001.1623785695--rondagostino--minor_more_fix_security_rolling_upgrade--f1a86adb9/report.html
```
================================================================================
SESSION REPORT (ALL TESTS)
ducktape version: 0.8.1
session_id: 2021-06-15--001
run time: 27 minutes 27.648 seconds
tests run: 16
passed: 16
failed: 0
ignored: 0
================================================================================
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org