[KUDU-1408] Adding a replica may never succeed if copying tablet takes longer than the log retention time

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.8.0
• Fix Version/s: 1.0.0
• Component/s: consensus, tserver
• Target Version/s: 1.0.0
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 10/Apr/16 21:18
• Updated: 10/Sep/16 23:52
• Resolved: 10/Sep/16 23:52

Description

Currently, while a remote bootstrap session is in progress, we anchor the logs from the time at which it started. However, as soon as the session finishes, we drop the anchor, and delete any logs. In the case where the tablet copy itself takes longer than the log retention period, this means it's likely to have a scenario like:

• TS A starts downloading from TS B. It plans to download segments 1-4 and adds an anchor.
• TS B handles writes for 20 minutes, rolling the log many times (e.g. up to log segment 20)
• TS A finishes downloading, and ends the remote bootstrap session
• TS B no longer has an anchor, so GCs all logs 1-16.
• TS A finishes opening the tablet it just copied, but immediately is unable to catch up (because it only has segments 1-4, but the leader only has 17-20)
• TS B evicts TS A

This loop will go on basically forever until the write workload stops on TS B.

Issue Links

• relates to: KUDU-38 bootstrap should not replay logs that are known to be fully flushed