David Smiley created SOLR-18320:
-----------------------------------
Summary: bin/solr create should not use ZK if ZK host not provided
Key: SOLR-18320
URL: https://issues.apache.org/jira/browse/SOLR-18320
Project: Solr
Issue Type: Improvement
Components: cli
Reporter: David Smiley
I used "bin/solr create" to create a collection, using a HTTP Solr reference.
To my surprise, the logging showed warnings related to ZkCredentialsInjector.
This shows ZK classes are loaded, which ought not to be the case, as I didn't
supply a ZK_HOST.
{noformat}
bin/solr create -c ffbbccdd --solr-connection 'http://localhost:8983'
WARNING: Using _default configset. Data driven schema functionality is enabled
by default, which is
NOT RECOMMENDED for production use. To turn it off:
curl http://localhost:8983/solr/ffbbccdd/config -d
'{"set-user-property": {"update.autoCreateFields":"false"}}'
Or:
bin/solr config -c ffbbccdd -s http://localhost:8983 --action
set-user-property --property update.autoCreateFields --value false
WARN - 2026-07-25 17:49:06.477; org.apache.solr.common.cloud.SolrZkClient;
Using default ZkCredentialsInjector. ZkCredentialsInjector is not secure, it
creates an empty list of credentials which leads to 'OPEN_ACL_UNSAFE' ACLs to
Zookeeper nodes
WARN - 2026-07-25 17:49:06.479; org.apache.solr.common.cloud.SolrZkClient;
Using default ZkACLProvider. DefaultZkACLProvider is not secure, it creates
'OPEN_ACL_UNSAFE' ACLs to Zookeeper nodes
Created collection 'ffbbccdd' with 1 shard(s), 1 replica(s) with config-set
'ffbbccdd' {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
