-
Notifications
You must be signed in to change notification settings - Fork 3.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
cli,clusterversion: high cluster version count breaks debug zips #77579
Comments
Hi @irfansharif, please add branch-* labels to identify which branch(es) this release-blocker affects. 🦉 Hoot! I am a Blathers, a bot for CockroachDB. My owner is otan. |
When someone works on this, I'll gladly review the PR. |
The root cause here is interesting, and sort of terrible: we are storing bytes data in a string column in this system table. |
@ajwerner so this issue is not really obs inf then, it's more of a SQL / shared systems thing? |
I think there's two facets here. We're using a STRING column but storing arbitrary bytes in it, that seems to cause problems when casting that field to
I think the second issue does belong here. |
Ok, that seems hard. I can see two different ways:
|
cc @rimadeodhar for triage |
I could see us adding a new builtin that just interprets a |
I'd like a solution that's guaranteed to work on previous-version clusters too |
|
🙌 that's the ticket! |
77244: server: add HSTS support via cluster setting r=knz a=dhartunian This commit adds a boolean cluster setting: `server.hsts.enabled` which, when enabled attaches standard HSTS headers to http requests originating from CRDB nodes. The headers looke like this: `Strict-Transport-Security: max-age=31536000` When this header is present, most web browsers will automatically upgrade all HTTP connections to HTTPS and *remember* that setting until the expiry of 1 year defined in the header. *Important*: Careless enabling of this feature can result in broken access to the DB Console in the browser. If we instruct the browser to always use HTTPS without having a valid TLS configuration, the browser will no longer fallback to HTTP until the HSTS setting is manually cleared. Resolves #77224 Release justification: low-risk update; opt-in security enhancement Release note (security update, ops change, ui change): users can enable HSTS headers to be set on all HTTP requests which force browsers to upgrade to HTTPS without a redirect. This is controlled by setting the `server.hsts.enabled` cluster setting to true which is false by default. 77637: cli: debug zip treats version column as string r=ajwerner,irfansharif a=dhartunian Previously, we converted the version column in `system.settings` to hexadecimal by converting it to bytes first. This led to a problem once the version got higher than a certain number. Resolves #77579 Release justification: low risk bug fix to debug zip generation Release note: None 77643: teamcity-trigger: fix up timeout argument r=rail a=rickystewart The `TESTTIMEOUT` argument here is an artifact from the original version of this job, which ran tests with `-test.timeout $TESTTIMEOUT`. In `go test` world this configures the timeout *per package*. However, for Bazel we want the `--test_timeout` to be higher than the `maxtime` that we give to `stress`. So here we just add an extra minute to the `maxtime` (which is the same thing we do in `dev`). Without this change, longer tests can time out at the Bazel level before they would time out at the `stress` level (see #77120). Release justification: Fix `stress` nightly job Release note: None Co-authored-by: David Hartunian <[email protected]> Co-authored-by: Ricky Stewart <[email protected]>
Describe the problem
#77337 introduces two cluster versions, and observed in CI that doing so partially breaks debug zip collection of the system tables.
To Reproduce
To repro, apply:
Spin up a cockroach shell and run the following:
This is the query we use to populate debug zips:
cockroach/pkg/cli/zip.go
Line 53 in e097fc4
Expected behavior
For the above not to fail. Because it does, debug zips will fail to capture
system.settings
data.+cc @ajwerner who touched this last in #70498. I'm not sure who a better owner is. Server?
Jira issue: CRDB-13662
The text was updated successfully, but these errors were encountered: