Geoffrey Jacoby created HBASE-23316:
---------------------------------------
Summary: RegionServers should refuse to load Regions with
malformed coprocs, but not crash
Key: HBASE-23316
URL: https://issues.apache.org/jira/browse/HBASE-23316
Project: HBase
Issue Type: Improvement
Reporter: Geoffrey Jacoby
Assignee: Geoffrey Jacoby
Currently, a region server will crash if it tries to load a region with a
coprocessor that is malformed (such as not being on the RS's classpath.) This
can lead to a cascading "poison pill" in which the HMaster keeps reassigning
the region to different region servers, bringing down server after server and
endangering the whole cluster.
We definitely can't load the Region if the coproc is wrong, but neither should
that harm other, correctly configured regions on the same server.
In this JIRA, I'll change the behavior to fail to load the region, and
increment a metric for region load failures. Future JIRAs can build on this,
such as by having the HMaster stop trying to load a malformed region absent
user intervention after some number of retries.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
