[SERVER-77237] Fail the tenant migration if the recipient sees any donor QE oplog entries Created: 17/May/23 Updated: 29/Oct/23 Resolved: 01/Jun/23 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | 7.1.0-rc0, 7.0.0-rc3 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Suganthi Mani | Assignee: | Suganthi Mani |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||
| Assigned Teams: |
Serverless
|
||||||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||||||
| Operating System: | ALL | ||||||||||||||||
| Backport Requested: |
v7.0
|
||||||||||||||||
| Sprint: | Server Serverless 2023-06-12 | ||||||||||||||||
| Participants: | |||||||||||||||||
| Description |
|
Tenant migration’s tenant oplog applier doesn’t handle retryable internal transaction writes properly. And, queryable encryption (QE) uses retryable internal transaction machinery. This means, retrying the QE write ops on recipient after migration commit, can cause duplicate commits. EDIT: We have decided to go with the short-term fix as “fail the tenant migration if the recipient sees any donor QE oplog entries <= 7.0”. |
| Comments |
| Comment by Githook User [ 01/Jun/23 ] |
|
Author: {'name': 'Suganthi Mani', 'email': 'suganthi.mani@mongodb.com', 'username': 'smani87'}Message: (cherry picked from commit 2a43d888fa8ffa8525f40112eee427eaf75f059c) |
| Comment by Githook User [ 01/Jun/23 ] |
|
Author: {'name': 'Suganthi Mani', 'email': 'suganthi.mani@mongodb.com', 'username': 'smani87'}Message: |
| Comment by Githook User [ 01/Jun/23 ] |
|
Author: {'name': 'Suganthi Mani', 'email': 'suganthi.mani@mongodb.com', 'username': 'smani87'}Message: |
| Comment by Suganthi Mani [ 26/May/23 ] |
|
Cloud and product have agreed to go with the short-term fix as “fail the tenant migration if the recipient sees any donor QE oplog entries <= 7.0”. This way we allow customers to try out QE in cheaper mode. And, It's very unlikely customer runs a sustained QE workload which prevents tenant from migration for months. We mostly expect "try it out" QE customers in Serverlss. |
| Comment by Suganthi Mani [ 19/May/23 ] |
|
Discussed with judah.schvimer@mongodb.com, for now we are going to hold on this ticket with 7.0 required and will revisit this ticket end of June (or if we complete |