hubcio opened a new pull request, #3744: URL: https://github.com/apache/iggy/pull/3744
A load balancer round-robining HTTP requests across cluster nodes breaks the web UI: followers answer every control-plane write with a transient not-a-leader 503 the browser cannot act on. Followers now re-issue such requests to the metadata primary over an internal cyper client and relay the response on the original connection. Retries happen only for outcomes that provably never entered the pipeline (connect failure, TransientNotAccepted reply, 307 redirect re-resolved from the local roster), so a request can never be applied twice. submit_gated now surfaces the actual transient code instead of collapsing everything to NotCommitted. Cross-node token validity: when no JWT secret is configured, the HS256 signing key is derived from the cluster shared secret via blake3, so any node can verify tokens issued by another. The forward hop pins the local TLS certificate; plaintext is allowed and documented. Partition-plane requests (messages, consumer offsets) still run on the receiving node; forwarding them needs per-partition-group targeting, marked with a TODO. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
