Alexey Serbin has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/19913 )

Change subject: [python] allow adding trusted CA certs when using JWT
......................................................................


Patch Set 2:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/19913/2/python/kudu/tests/test_client.py
File python/kudu/tests/test_client.py:

http://gerrit.cloudera.org:8080/#/c/19913/2/python/kudu/tests/test_client.py@912
PS2, Line 912:                 if e.code == 503:
> I understand that in case of one master responding with 503, we can try oth
During first startup, follower masters are the last ones to get IPKI CA cert 
read and available.  That's by design.

Overall, it's totally legit to get HTTP 503 from a master before it read (or 
generated, if that the first start up of a leader master) IPKI CA certificate: 
https://gerrit.cloudera.org/#/c/19906/5/src/kudu/master/master_path_handlers.cc@608

So, I wrote that code as-is originally.  Ideally, it would make sense to have 
this under some sort of ASSERT_EVENTUALLY, but right now it works as is.



--
To view, visit http://gerrit.cloudera.org:8080/19913
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: Ie13ea1877e7711d00ede41d141c01a5240bb9205
Gerrit-Change-Number: 19913
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Abhishek Chennaka <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Marton Greber <[email protected]>
Gerrit-Reviewer: Zoltan Chovan <[email protected]>
Gerrit-Comment-Date: Tue, 23 May 2023 20:20:39 +0000
Gerrit-HasComments: Yes

Reply via email to