[ZOOKEEPER-3818] fix zkServer.sh status command to support SSL-only server

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.5.5
• Fix Version/s: 3.5.9, 3.7.0, 3.6.2
• Component/s: security
• Labels: pull-request-available
• Assignee: lujie
• Reporter: Aishwarya Soni
• Created: 06/May/20 06:39
• Updated: 10/Sep/20 10:43
• Resolved: 12/May/20 10:07

Description

I am configuring SSL on Zookeeper 3.5.5 branch and have removed the clientPort config from zoo.cfg and adding onlysecureClientPort. Also, I have removed it from my server ensemble connection string in zoo.cfg.dynamic file as it results in a port binding issue on the port 2181 if we keep it in both the files.

But, in zkServer.sh, it checks if the clientPort is set in the status cmd else it throws exit 1 and terminates the process. How to overcome this situation? We cannot see the clientPort in zoo.cfg as it would enable mixed mode which we do not want when we enable SSL.

Also, I am using zkServer.sh status output as a healthcheck for our containerized zookeeper to see if thee quorum is established or not as in cluster mode, zookeeper can finally run either in follower or leader state (ignoring intermediate state changes). So as the status output throws exit 1, the healthcheck is also failing.

Issue Links

• links to: GitHib Pull Request #1348