[
https://issues.apache.org/jira/browse/SOLR-18167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18092227#comment-18092227
]
David Smiley commented on SOLR-18167:
-------------------------------------
The branch_10x integration tests have been failing for some time because the
work here has not been fully backported.
https://ci-builds.apache.org/job/Solr/job/Solr-TestIntegration-10.x/
Claude's analysis:
h3. Root Cause Analysis: Solr-TestIntegration-10.x Failure
*Failing test:* {{test_auth.bats}} test #8 "enable auth connects via zookeeper"
*Error:* {{KeeperErrorCode = NoNode for /security.json}}
*Last passing build:* #116 (Feb 10, 2026) — job was inactive until #243 (June
24, 2026), failing since.
*Main branch CI:* Passes consistently (build #588 confirmed test #8 passes).
h4. The Bug
{{AuthTool.java:270}} uses {{zkClient.setData("/security.json", ...)}} which
requires the ZK node to already exist. {{ZkController.createClusterZkNodes()}}
normally creates it during startup via {{ensureExists}}, but the node is not
found when the auth CLI connects to ZK with {{-z localhost:\{ZK_PORT\}}}.
h4. Missing Backport
SOLR-18167 PR [#4535|https://github.com/apache/solr/pull/4535] ("Fix the
original PR #4507 to cover more use cases in mapping old to new system property
names") exists on {{main}} but was *not* backported to {{branch_10x}}.
{{branch_10x}} has the *first* SOLR-18167 fix (PR #4507) which introduced
{{findDeprecatedMappingKey()}} with {{camelCaseToDotSeparated}} normalization
on lookup — but the {{DEPRECATED_MAPPINGS}} keys themselves were *not*
normalized at load time. This mismatch causes incorrect deprecated system
property migration, which cascades into a failure during embedded ZK
initialization.
The follow-up PR #4535 fixes this by:
* Normalizing {{DEPRECATED_MAPPINGS}} keys with {{camelCaseToDotSeparated()}}
at load time
* Fixing {{Boolean.getBoolean(deprecatedKey)}} →
{{Boolean.parseBoolean(sysProperties.getProperty(deprecatedKey))}} for inverted
property migration
The PR description itself notes: _"The original solution didn't cover all use
cases. Specifically, the test_start_solr.bats integration tests were failing."_
h4. Fix
Cherry-pick commit {{28ac2a57447}} (SOLR-18167 PR #4535) onto {{branch_10x}}.
> Conversion of old to new property name not working
> --------------------------------------------------
>
> Key: SOLR-18167
> URL: https://issues.apache.org/jira/browse/SOLR-18167
> Project: Solr
> Issue Type: Bug
> Affects Versions: 10.0
> Reporter: Eric Pugh
> Assignee: Eric Pugh
> Priority: Blocker
> Labels: pull-request-available
> Fix For: 10.1
>
> Time Spent: 3h 10m
> Remaining Estimate: 0h
>
> Upgrading Chorus from Solr 9 to 10. I am concerned our EnvUtils conversion
> isn't working.
>
> "SOLR_OPTS=-Dsolr.auth.jwt.allowOutboundHttp=true" is used with jwt-auth:
> =>org.apache.solr.common.SolrException: wellKnownUrl is using http protocol.
> HTTPS required for IDP communication. Please use SSL or start your nodes with
> -Dsolr.auth.jwt.outbound.http.enabled=true to allow HTTP for test purposes.
>
> at
> org.apache.solr.security.jwt.JWTIssuerConfig.checkAllowOutboundHttpConnections(JWTIssuerConfig.java:594)
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]