[ https://issues.apache.org/jira/browse/SOLR-17574?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17902582#comment-17902582 ]
David Smiley commented on SOLR-17574: ------------------------------------- Even though this is a public method on ClusterState; I think we can simply remove it without back-compat. It's only there to serve AllowListUrlChecker. > ClusterState getHostAllowList isn't always updated when live nodes change > ------------------------------------------------------------------------- > > Key: SOLR-17574 > URL: https://issues.apache.org/jira/browse/SOLR-17574 > Project: Solr > Issue Type: Bug > Security Level: Public(Default Security Level. Issues are Public) > Components: SolrCloud > Affects Versions: 8.8.2 > Reporter: David Smiley > Priority: Major > Labels: pull-request-available > Time Spent: 50m > Remaining Estimate: 0h > > ClusterState.getHostAllowList was introduced in SOLR-15217 to validate a host > may be reached for distributed-search. But it's a cached value computed from > the live nodes, and the live nodes may change. Thus it can happen that a new > live node arrives, gets replicas, and suddenly, distributed-search fails with > a 403 ("Forbidden"), with an error string containing this substring: "is > neither a live node of the cluster nor in the configured". -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org