Gergely Harmadás created KAFKA-19480:
----------------------------------------
Summary: KRaft migration hangs when /migration has null value
Key: KAFKA-19480
URL: https://issues.apache.org/jira/browse/KAFKA-19480
Project: Kafka
Issue Type: Bug
Components: kraft, migration
Affects Versions: 3.8.1, 3.7.2, 3.6.2, 3.5.2, 3.4.1, 3.9.1
Reporter: Gergely Harmadás
Assignee: Gergely Harmadás
When using the
[zookeeper-security-migration|https://kafka.apache.org/39/documentation.html#zk_authz_migration]
tool without the '–enable.path.check' option, the script not only updates the
ACLs for the existing znodes, but also creates any non-existing ones (with the
ACL options specified) using null values based on the list defined in
[ZkData.SecureRootPaths.|https://github.com/apache/kafka/blob/3.9/core/src/main/scala/kafka/zk/ZkData.scala#L1089-L1102]
This is especially problematic for the /migration znode as the current logic
only checks for the existence of the znode and later the migration process will
hang when it tries to parse the null value over and over again.
In summary, the migration cannot be completed if the
zookeeper-security-migration script was run previously, and the only workaround
is to manually remove the /migration znode in such cases. I propose a simple
fix to circumvent the manual step by recreating the /migration znode if it
contains a null value.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
