[ 
https://issues.apache.org/jira/browse/HADOOP-8247?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13253872#comment-13253872
 ] 

Mingjie Lai commented on HADOOP-8247:
-------------------------------------

I overlooked the jira so just found the discussion here. 

The problem of this jira is that it makes the auto and manual failover 
*exclusive* to each other. While in section 2.7.2 of the design doc at 
https://issues.apache.org/jira/browse/HDFS-2185, a manual failover is supposed 
to be handled by zkfc if the auto failover configure is on. That proposal makes 
it possible that we can perform a manual failover for upgrade purposes, while 
having auto failover to prevent a nn failure.

I will open another jira to address the above issue. However I foresee the 
behaviour of manual failover will be changed since it will be allowed no matter 
auto failover is turned on or not. 
                
> Auto-HA: add a config to enable auto-HA, which disables manual FC
> -----------------------------------------------------------------
>
>                 Key: HADOOP-8247
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8247
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: auto-failover, ha
>    Affects Versions: Auto Failover (HDFS-3042)
>            Reporter: Todd Lipcon
>            Assignee: Todd Lipcon
>             Fix For: Auto Failover (HDFS-3042)
>
>         Attachments: hadoop-8247.txt, hadoop-8247.txt, hadoop-8247.txt, 
> hadoop-8247.txt, hadoop-8247.txt, hadoop-8247.txt
>
>
> Currently, if automatic failover is set up and running, and the user uses the 
> "haadmin -failover" command, he or she can end up putting the system in an 
> inconsistent state, where the state in ZK disagrees with the actual state of 
> the world. To fix this, we should add a config flag which is used to enable 
> auto-HA. When this flag is set, we should disallow use of the haadmin command 
> to initiate failovers. We should refuse to run ZKFCs when the flag is not 
> set. Of course, this flag should be scoped by nameservice.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to