Versions Compared

Old Version 16

changes.mady.by.user Maroš Orsák

Saved on

compared with

New Version 17

changes.mady.by.user Maroš Orsák

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Since CIDR host patterns are persisted in AccessControlEntryRecord metadata records, allowing metadata version downgrade while such records exist would leave the cluster in an inconsistent state (i.e., the ACLs would be still stored and replayed, but older brokers would not regnonize the CIDR format and would fail to match correctly. 

So to prevent this we introduce pre-downgrade validation step. Before any metadata version downgrade is applied, FeatureControlManager invokes a validator registered by QuorumController that checks whether CIDR ACLs currently exists. If the target metadata version does not support CIDR and any ACL host pattern contains CIDR notation, the downgrade is rejected with the error:

...