Siyao Meng created HDDS-17128:
---------------------------------
Summary: Secure SCM HA: test and document replacing the primordial
SCM in a ring with more than 3 SCMs
Key: HDDS-17128
URL: https://issues.apache.org/jira/browse/HDDS-17128
Project: Apache Ozone
Issue Type: Sub-task
Components: Security, SCM HA
Reporter: Siyao Meng
Per SCM-HA.md, "Only primordial SCM can issue signed certificates for other
SCM's". In a secure ring, bootstrapping a new SCM (to replace a failed one or
to grow the ring) therefore depends on the primordial SCM being available,
however many other SCMs are healthy. With 5 SCMs the point is to tolerate 2
failures, so losing the primordial SCM should not block replacing nodes.
To do:
* Add a test: secure 5-SCM ring, stop or decommission the primordial SCM,
bootstrap a replacement SCM.
* Document the procedure, or fix the dependency if the replacement cannot get a
sub-CA certificate.
The new 5-SCM variant of {{TestSecretKeysApi#testSecretKeyAfterSCMFailover}}
verifies that all 5 SCM certificates are issued by the shared root CA at
cluster start, but does not cover this case.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
