-
Notifications
You must be signed in to change notification settings - Fork 9.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
etcdserver: make corruption check work under peer mTLS #11621
Conversation
Codecov Report
@@ Coverage Diff @@
## master #11621 +/- ##
=========================================
- Coverage 66.2% 66.1% -0.1%
=========================================
Files 403 401 -2
Lines 36674 36628 -46
=========================================
- Hits 24280 24213 -67
+ Misses 10924 10914 -10
- Partials 1470 1501 +31
Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Clean implementation. Thanks Jingyi.
|
||
respsLen := len(resps) | ||
for _, c := range cli.Endpoints() { | ||
var lastErr error | ||
for _, ep := range p.eps { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we rename the pps
p
eps
? It is not easy to understand and remember. I think the naming way of getVersion()
and getVersions()
in cluster_util.go is much clear.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks! I tried to make it clearer. I did keep eps as short for endpoints.
bc3f739
to
4ff7638
Compare
During corruption check, get peer's hashKV via http call.
4ff7638
to
c031b27
Compare
…21-upstream-release-3.4 Automated cherry pick of #11621 to release-3.4
Currently, corruption check does not work when mTLS is enabled between peers. (See #10934)
With this PR, corruption check uses the existing peer-to-peer http communication framework to get peer hashKV.
Manually tested it works. Example server log: