Thanks for report and the fix, Chris. I agree this should be considered a blocker. It will be included in the next RC
-David On Thu, Mar 26, 2020 at 6:01 PM Christopher Egerton <chr...@confluent.io> wrote: > Hi all, > > I'd like to request that https://issues.apache.org/jira/browse/KAFKA-9771 > be > treated as a release blocker for 2.5. > > This is a regression caused by the recent bump in Jetty version that causes > inter-worker communication to fail for Connect clusters that use SSL and a > keystore that contains multiple certificates (which is necessary for SNI in > the event that the Connect REST interface is bound to multiple domain > names). > > The impact for affected users is quite high; either the Connect worker must > be reconfigured to listen on a single domain name and its keystore must be > wiped accordingly, or inter-worker SSL needs to be disabled entirely by > adding an unsecured listener and configuring the worker to advertise the > URL for that unsecured listener to other workers in the cluster. > > I've already implemented a small fix that works with local testing, and > have opened a PR to add it to Kafka: > https://github.com/apache/kafka/pull/8369. > > Would it be possible to get this fix included in 2.5.0, pending review? > > Cheers, > > Chris > > On Fri, Mar 20, 2020 at 6:59 PM Ismael Juma <ism...@juma.me.uk> wrote: > > > Hi Boyang, > > > > Is this a regression? > > > > Ismael > > > > On Fri, Mar 20, 2020, 5:43 PM Boyang Chen <reluctanthero...@gmail.com> > > wrote: > > > > > Hey David, > > > > > > I would like to raise https://issues.apache.org/jira/browse/KAFKA-9701 > > as > > > a > > > 2.5 blocker. The impact of this bug is that it could throw fatal > > exception > > > and kill a stream thread on Kafka Streams level. It could also create a > > > crashing scenario for plain Kafka Consumer users as well as the > exception > > > will be thrown all the way up. > > > > > > Let me know your thoughts. > > > > > > Boyang > > > > > > On Tue, Mar 17, 2020 at 8:10 AM David Arthur <mum...@gmail.com> wrote: > > > > > > > Hello Kafka users, developers and client-developers, > > > > > > > > This is the third candidate for release of Apache Kafka 2.5.0. > > > > > > > > * TLS 1.3 support (1.2 is now the default) > > > > * Co-groups for Kafka Streams > > > > * Incremental rebalance for Kafka Consumer > > > > * New metrics for better operational insight > > > > * Upgrade Zookeeper to 3.5.7 > > > > * Deprecate support for Scala 2.11 > > > > > > > > > > > > Release notes for the 2.5.0 release: > > > > > > https://home.apache.org/~davidarthur/kafka-2.5.0-rc2/RELEASE_NOTES.html > > > > > > > > *** Please download, test and vote by Tuesday March 24, 2020 by 5pm > PT. > > > > > > > > Kafka's KEYS file containing PGP keys we use to sign the release: > > > > https://kafka.apache.org/KEYS > > > > > > > > * Release artifacts to be voted upon (source and binary): > > > > https://home.apache.org/~davidarthur/kafka-2.5.0-rc2/ > > > > > > > > * Maven artifacts to be voted upon: > > > > > https://repository.apache.org/content/groups/staging/org/apache/kafka/ > > > > > > > > * Javadoc: > > > > https://home.apache.org/~davidarthur/kafka-2.5.0-rc2/javadoc/ > > > > > > > > * Tag to be voted upon (off 2.5 branch) is the 2.5.0 tag: > > > > https://github.com/apache/kafka/releases/tag/2.5.0-rc2 > > > > > > > > * Documentation: > > > > https://kafka.apache.org/25/documentation.html > > > > > > > > * Protocol: > > > > https://kafka.apache.org/25/protocol.html > > > > > > > > > > > > I'm thrilled to be able to include links to both build jobs with > > > successful > > > > builds! Thanks to everyone who has helped reduce our flaky test > > exposure > > > > these past few weeks :) > > > > > > > > * Successful Jenkins builds for the 2.5 branch: > > > > Unit/integration tests: > > https://builds.apache.org/job/kafka-2.5-jdk8/64/ > > > > System tests: > > > > https://jenkins.confluent.io/job/system-test-kafka/job/2.5/42/ > > > > > > > > -- > > > > David Arthur > > > > > > > > > > -- David Arthur
