[ 
https://issues.apache.org/jira/browse/KAFKA-2771?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15000454#comment-15000454
 ] 

ASF GitHub Bot commented on KAFKA-2771:
---------------------------------------

GitHub user benstopford opened a pull request:

    https://github.com/apache/kafka/pull/496

    KAFKA-2771: Added rolling upgrade system test (docktape) for SSL

    This still needs a final run of the full system test suite. I've run this 
test and the replication_test.py (which is the other test most affected) on 
Ec2. Both pass. 
    
    Not totally happy with the logic around listener selection but the SASL 
tests moved over a model with a single port which doesn't work well when 
performing a rolling bounce. 
    
    To make this stable on Ec2 I increased the consumer timeouts and use a 
unique consumer group. 

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/benstopford/kafka security-upgrade-test

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/kafka/pull/496.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #496
    
----
commit ee34dbeb0667f081f77ac32031b571724ecd819b
Author: Ben Stopford <benstopf...@gmail.com>
Date:   2015-11-09T00:09:17Z

    KAFKA-2771: Added rolling upgrade system test (docktape) for SSL

----


> Add SSL Rolling Upgrade Test to System Tests
> --------------------------------------------
>
>                 Key: KAFKA-2771
>                 URL: https://issues.apache.org/jira/browse/KAFKA-2771
>             Project: Kafka
>          Issue Type: Improvement
>          Components: security
>            Reporter: Ben Stopford
>            Assignee: Ben Stopford
>
> Ensure we can perform a rolling upgrade to enable SSL on a running cluster
> *Method*
> - Start with 0.9.0 cluster with SSL disabled
> - Upgrade to Client and Inter-Broker ports to SSL (This will take two rounds 
> bounces. One to open the SSL port and one to close the PLAINTEXT port)
> - Ensure you can produce  (acks = -1) and consume during the process. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to