[
https://issues.apache.org/jira/browse/KAFKA-19480?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18011113#comment-18011113
]
ASF GitHub Bot commented on KAFKA-19480:
----------------------------------------
harmadasg opened a new pull request, #708:
URL: https://github.com/apache/kafka-site/pull/708
Add workaround for hanging kraft migration due to null `/migration` znode.
See also https://github.com/apache/kafka/pull/20128
Please note that the issue should be fixed in 3.9.2 but also added the
workaround steps for the 3.9 docs to have the instructions available until the
next release is done. After 3.9.2 the the workaround should be removed from the
3.9 docs. (I also haven't added the doc update in the Kafka repo)
> KRaft migration hangs when /migration has null value
> ----------------------------------------------------
>
> Key: KAFKA-19480
> URL: https://issues.apache.org/jira/browse/KAFKA-19480
> Project: Kafka
> Issue Type: Bug
> Components: kraft, migration
> Affects Versions: 3.4.1, 3.5.2, 3.6.2, 3.7.2, 3.8.1, 3.9.1
> Reporter: Gergely Harmadás
> Assignee: Gergely Harmadás
> Priority: Major
>
> When using the
> [zookeeper-security-migration|https://kafka.apache.org/39/documentation.html#zk_authz_migration]
> tool without the '–enable.path.check' option, the script not only updates
> the ACLs for the existing znodes, but also creates any non-existing ones
> (with the ACL options specified) using null values based on the list defined
> in
> [ZkData.SecureRootPaths.|https://github.com/apache/kafka/blob/3.9/core/src/main/scala/kafka/zk/ZkData.scala#L1089-L1102]
> This is especially problematic for the /migration znode as the current logic
> only checks for the existence of the znode and later the migration process
> will hang when it tries to parse the null value over and over again.
> In summary, the migration cannot be completed if the
> zookeeper-security-migration script was run previously, and the only
> workaround is to manually remove the /migration znode in such cases. I
> propose a simple fix to circumvent the manual step by recreating the
> /migration znode if it contains a null value.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
