Hello Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/6356
to look at the new patch set (#3).
Change subject: KUDU-1927 [master] always send IPKI CA certificate
......................................................................
KUDU-1927 [master] always send IPKI CA certificate
A master server always sends back Kudu IPKI CA certificate and valid
authn token with successful response to the ConnectToCluster RPC if it
thinks it's the leader.
This patch fixes potential race between responding to client's
ConnectToCluster RPC call and loading Kudu CA certificate from the
system table. Prior to this fix it was possible for a Kudu client to
successfully connect to the Kudu cluster, but receive no CA certificate
or get an authn token signed by an expired TSK from a master server
which claims it's the leader.
Change-Id: Ib9a20e6da6531091fcc597af58a7bbf01a8847f5
---
M src/kudu/client/client.h
M src/kudu/client/master_rpc.cc
M src/kudu/integration-tests/master_cert_authority-itest.cc
M src/kudu/master/catalog_manager.cc
M src/kudu/master/master_service.cc
5 files changed, 175 insertions(+), 13 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/56/6356/3
--
To view, visit http://gerrit.cloudera.org:8080/6356
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ib9a20e6da6531091fcc597af58a7bbf01a8847f5
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Adar Dembo <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: David Ribeiro Alves <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Todd Lipcon <[email protected]>
