[HADOOP-8247] Auto-HA: add a config to enable auto-HA, which disables manual FC

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Auto Failover (HDFS-3042)
• Fix Version/s: Auto Failover (HDFS-3042)
• Component/s: auto-failover, ha
• Target Version/s: Auto Failover (HDFS-3042)
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 05/Apr/12 00:54
• Updated: 13/Apr/12 23:55
• Resolved: 11/Apr/12 05:40

Description

Currently, if automatic failover is set up and running, and the user uses the "haadmin -failover" command, he or she can end up putting the system in an inconsistent state, where the state in ZK disagrees with the actual state of the world. To fix this, we should add a config flag which is used to enable auto-HA. When this flag is set, we should disallow use of the haadmin command to initiate failovers. We should refuse to run ZKFCs when the flag is not set. Of course, this flag should be scoped by nameservice.