...

$ ./bin/flink run -C /path/to/dependency.jar -c com.example.MyJob my-flink-job.jar

Design

There are two perspectives for ICP operations: a user perspective and a cluster perspective.

From a user perspective 4 main operations are allowed for ICP:

...

The following operations with ICP must be implemented:

• create - when jars for ICP stored on control.sh running node.
• register - when jars for ICP exists on all server nodes, already. 
• check - for registered ICP, check that 
• safe remove from the cluster. Will wait until all code running on the top of ICP stops.
• unsafe remove. Will forcefully remove ICP regardless of code currently running. 
• get ICP status in the cluster: list of all deployment units in the cluster with their statuses (will be defined below).
• get ICP status on a specific node. The main scenario for this operation is troubleshooting.

From a cluster perspective a deployment unit could be deployed on the cluster, but it could be not deployed on a particular node. So additional operation is required: create ICP on the target node (on demand).

Directories

All ICP must be placed in the ICP base directory which is a subdirectory under Ignite work directory:

...

For each ICP a directory should be created under the base directory. The name of this directory must be the same as ICP name and a nested directory for a particular version must be created. 

Example:

Operations

create

1. Send all jars to choosen server node:
   1. Select random server node - deploy coordinator.
   2. Initiate sending jar files to deploy coordinator.
   3. Deploy coordinator check metastorage for the ICP (name, version) record.
      1. if not exists then creates: (name, version, self_node_id, CREATING).
      2. if exists and node alive then return "already exists" to the user.
      3. if status not CREATING then return "already exists" to the user.
      4. remove existing record and create new: (name, version, self_node_id, CREATING).
   4. Deploy coordinator stores files into some temporary directory.
2. After uploading complete, start the "Upload new ICP" distributed process.
   1. Sent UploadNewICP message by discovery.
   2. On receive UploadNewICP message each server node request ICP files one by one from the deployment coordinator.
      1. File download protocol used to receive file. Same protocol used during snapshot preload.
   3. Send UploadNewICPDone single message on completion or fail.
   4. Deploy coordinator on receiving all single messages completes "Upload new ICP" process with the corresponding status.
3. If "Upload new ICP" succeed then change metastorage record status to READY, otherwise remove it. 
4. Return status of "Upload new ICP" process to the user.  

register

1. Send command to choosen server node
   1. Select random server node - register coordinator.
2. Register coordinator check metastorage for the ICP (name, version) record.
   1. if not exists then creates: (name, version, self_node_id, CREATING).
   2. if exists and node alive then return "already exists" to the user.
   3. if status not CREATING then return "already exists" to the user.
   4. remove existing record and create new: (name, version, self_node_id, CREATING).
3. Register coordinator starts "Register new ICP" distributed process.
   1. Sent RegisterNewICP message by discovery.
   2. On receive RegisterNewICP message each node checks local files.
      1. Get file list. 
      2.  Calculate consistent control sum for each file.
      3. Send RegisterNewICPDone single message on completion or fail.
   3. Register coordinator on receive all single messages checks that all lists and control sums are the same.
      1. OK if true, FAIL otherwise.
4. If "Register new ICP" succeed then change metastorage record status to READY, otherwise remove it. 
5. Return status of "Register new ICP" process to the user. 

check

Invoke same procedure as register but without metastorage registration.

ICP must exists in cluster, already.

safe remove

1. Send command to random server node.
2. Update ICP status in metastorage.
3. Return result to the user.
4. When some code tries to start on top of ICP Ignite must check ICP status and throw exception if status not READY.
5. Each server node must track usage count for ICP:
   1. When some user code starts - increase usageCount.
   2. decrease usageCount on finish.
6. Eventually usageCount will become zero. Node must clean local resources then.

unsafe remove

1. Send command to all server node.
2. Remove ICP status in metastorage.
3. Remove all files from local disk.
4. Return result to the user.

Risks and Assumptions

We assume that p2p and deployment SPI will be removed from Ignite.

...

1. https://spark.apache.org/docs/latest/submitting-applications.html
2. https://tomcat.apache.org/tomcat-11.0-doc/deployer-howto.html
3. https://nightlies.apache.org/flink/flink-docs-stable/docs/ops/debugging/debugging_classloading/
4. https://nightlies.apache.org/flink/flink-docs-release-2.2/docs/ops/rest_api/
5. IEP-103: Code Deployment

Tickets