Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release 3.2.6 #3724

Closed
wants to merge 38 commits into from
Closed

Release 3.2.6 #3724

wants to merge 38 commits into from

Conversation

karol-kokoszka
Copy link
Collaborator

@karol-kokoszka karol-kokoszka commented Feb 22, 2024

Release 3.2.6


Please make sure that:

  • Code is split to commits that address a single change
  • Commit messages are informative
  • Commit titles have module prefix
  • Commit titles have issue nr. suffix

@Michal-Leszczynski
Copy link
Collaborator

@karol-kokoszka can we also include #3697 in this release?

@karol-kokoszka
Copy link
Collaborator Author

Ofc. Will add it

karol-kokoszka and others added 26 commits February 22, 2024 17:21
Newer Scylla versions (e.g. 2024) docker images don't run ssh server on them own, but we require it for some of SM tests.
Because of problems with restoring backups into Scylla 5.4 with raft schema enabled (#3662), we want to test the following workaround:

- use fresh cluster without raft schema
- restore as usual
- enable raft schema in the cluster

In order to do that, we leave raft schema on src cluster and test how it works with raft schema enabled/disabled on dst cluster.
Removing filtering was done so that our tests can pass with Scylla 5.4 and raft enabled, but it didn't improve the real life situations where agents don't have cross region remote location access.
…ing CQL SSL

Previously, SSL was preferred when client_encryption_options.enabled
coming from ScyllaDB configuration was true and SSL port is open,
even when Scylla Manager did not have any client certificate registered
for particular cluster.

This caused issues when ScyllaDB cluster was exposing both CQL and CQL
SSL with mTLS, because even when Manager was not registered with
certificates, it still insisted to establish sessions using SSL port.
CQL healthchecks was also affected.

Fixes #3698
"/storage_service/describe_ring/" returns the token range of a
random keyspace. this API is never used in production. what is used
is is cousin which accepts a mandatory keyspace path parameter, like
"/storage_service/describe_ring/{keyspace}", so let's drop it in
scylla-manager, we will drop this API in scylla as well.

Signed-off-by: Kefu Chai <[email protected]>
…use non SSL port on cluster

Manager 3.2.6 gives a possibility of explicitly disabling TLS on session even though the
certificate and key are available `force_tls_disabled`.
Besides that, there is an option to force session to always use non-tls port from scylla config `force_non_ssl_session_port`.
It adds information about `force-tls-disabled` and `force-non-ssl-session-port` flags.
Also, add timeout on first node setup, as misconfiguration could lead to hanging at this step.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants