[CASSANDRA-17478] Disallow removal of a DC from system_auth replication settings

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 4.1-alpha1, 4.1
• Component/s: Feature/Authorization
• Change Category: Operability
• Complexity: Normal
• Platform: All

Source Control Link

https://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=commit;h=3d9365096bc579d10e417278576d650611105120

Test and Documentation Plan

New testing added to ensure removal is blocked while nodes are active

• Assignee: Josh McKenzie
• Reporter: Josh McKenzie

Authors

Josh McKenzie

Reviewers

Jon Meredith

• Created: 23/Mar/22 16:46
• Updated: 27/May/22 19:24
• Resolved: 28/Mar/22 18:04

Description

It's never correct for an operator to remove a DC from system_auth replication settings while there are currently nodes up in that DC. We should disallow the ability to manually make this change, as if you need to decommission a DC you need to remove all the nodes from the cluster before allowing the replication settings change on system_auth.

Issue Links

• breaks: CASSANDRA-17496 Test Failure: AlterTest.testCreateAlterNetworkTopologyWithDefaults