Github user StephanEwen commented on the issue:
https://github.com/apache/flink/pull/3599
-1 sorry.
This needs to go to the drawing board (FLIP or detailed JIRA discussion)
before we consider a change that is impacting the guarantees and failure mode
so heavily.
Some initial comments:
- In proper HA, you need some service that "locks" the leader, otherwise
you are vulnerable to the "split brain" problem where a network partition makes
multiple JobManagers work as leaders, each with some TaskManagers.
- In FLIP-6, we are introducing the `HighAvailabilityServices` to allow
for multiple levels of guarantees with different implementations. I can see
that introducing a highly-available but not split-brain-protected is
interesting, but it should not replace any existing mode, but be a new mode.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
