Hi all, I'd like to request that https://issues.apache.org/jira/browse/KAFKA-9771 be treated as a release blocker for 2.5.
This is a regression caused by the recent bump in Jetty version that causes inter-worker communication to fail for Connect clusters that use SSL and a keystore that contains multiple certificates (which is necessary for SNI in the event that the Connect REST interface is bound to multiple domain names). The impact for affected users is quite high; either the Connect worker must be reconfigured to listen on a single domain name and its keystore must be wiped accordingly, or inter-worker SSL needs to be disabled entirely by adding an unsecured listener and configuring the worker to advertise the URL for that unsecured listener to other workers in the cluster. I've already implemented a small fix that works with local testing, and have opened a PR to add it to Kafka: https://github.com/apache/kafka/pull/8369. Would it be possible to get this fix included in 2.5.0, pending review? Cheers, Chris On Fri, Mar 20, 2020 at 6:59 PM Ismael Juma <ism...@juma.me.uk> wrote: > Hi Boyang, > > Is this a regression? > > Ismael > > On Fri, Mar 20, 2020, 5:43 PM Boyang Chen <reluctanthero...@gmail.com> > wrote: > > > Hey David, > > > > I would like to raise https://issues.apache.org/jira/browse/KAFKA-9701 > as > > a > > 2.5 blocker. The impact of this bug is that it could throw fatal > exception > > and kill a stream thread on Kafka Streams level. It could also create a > > crashing scenario for plain Kafka Consumer users as well as the exception > > will be thrown all the way up. > > > > Let me know your thoughts. > > > > Boyang > > > > On Tue, Mar 17, 2020 at 8:10 AM David Arthur <mum...@gmail.com> wrote: > > > > > Hello Kafka users, developers and client-developers, > > > > > > This is the third candidate for release of Apache Kafka 2.5.0. > > > > > > * TLS 1.3 support (1.2 is now the default) > > > * Co-groups for Kafka Streams > > > * Incremental rebalance for Kafka Consumer > > > * New metrics for better operational insight > > > * Upgrade Zookeeper to 3.5.7 > > > * Deprecate support for Scala 2.11 > > > > > > > > > Release notes for the 2.5.0 release: > > > > https://home.apache.org/~davidarthur/kafka-2.5.0-rc2/RELEASE_NOTES.html > > > > > > *** Please download, test and vote by Tuesday March 24, 2020 by 5pm PT. > > > > > > Kafka's KEYS file containing PGP keys we use to sign the release: > > > https://kafka.apache.org/KEYS > > > > > > * Release artifacts to be voted upon (source and binary): > > > https://home.apache.org/~davidarthur/kafka-2.5.0-rc2/ > > > > > > * Maven artifacts to be voted upon: > > > https://repository.apache.org/content/groups/staging/org/apache/kafka/ > > > > > > * Javadoc: > > > https://home.apache.org/~davidarthur/kafka-2.5.0-rc2/javadoc/ > > > > > > * Tag to be voted upon (off 2.5 branch) is the 2.5.0 tag: > > > https://github.com/apache/kafka/releases/tag/2.5.0-rc2 > > > > > > * Documentation: > > > https://kafka.apache.org/25/documentation.html > > > > > > * Protocol: > > > https://kafka.apache.org/25/protocol.html > > > > > > > > > I'm thrilled to be able to include links to both build jobs with > > successful > > > builds! Thanks to everyone who has helped reduce our flaky test > exposure > > > these past few weeks :) > > > > > > * Successful Jenkins builds for the 2.5 branch: > > > Unit/integration tests: > https://builds.apache.org/job/kafka-2.5-jdk8/64/ > > > System tests: > > > https://jenkins.confluent.io/job/system-test-kafka/job/2.5/42/ > > > > > > -- > > > David Arthur > > > > > >
