[ https://issues.apache.org/jira/browse/SOLR-17574?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17900992#comment-17900992 ]
David Smiley commented on SOLR-17574: ------------------------------------- I think the "hostAllowList" ought to not be on ClusterState; it ought to be in AllowListUrlChecker and cached there based on the latest liveNodes seen from ClusterState. It's the only consumer. ClusterState is an important SolrCloud abstraction; we should be conservative in adding methods there. WDYT [~broustant] ? > ClusterState getHostAllowList isn't always updated when live nodes change > ------------------------------------------------------------------------- > > Key: SOLR-17574 > URL: https://issues.apache.org/jira/browse/SOLR-17574 > Project: Solr > Issue Type: Bug > Security Level: Public(Default Security Level. Issues are Public) > Components: SolrCloud > Affects Versions: 8.8.2 > Reporter: David Smiley > Priority: Major > > ClusterState.getHostAllowList was introduced in SOLR-15217 to validate a host > may be reached for distributed-search. But it's a cached value computed from > the live nodes, and the live nodes may change. Thus it can happen that a new > live node arrives, gets replicas, and suddenly, distributed-search fails with > a 403 ("Forbidden"), with an error string containing this substring: "is > neither a live node of the cluster nor in the configured". -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org