Skip to content

Fix cluster() for inter-server secret (preserve initial user as before)#66364

Merged
pufit merged 4 commits intoClickHouse:masterfrom
azat:cluster-inter-server-secret-fix
Aug 7, 2024
Merged

Fix cluster() for inter-server secret (preserve initial user as before)#66364
pufit merged 4 commits intoClickHouse:masterfrom
azat:cluster-inter-server-secret-fix

Conversation

@azat
Copy link
Copy Markdown
Member

@azat azat commented Jul 10, 2024

Changelog category (leave one):

  • Bug Fix (user-visible misbehavior in an official stable release)

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Fix cluster() for inter-server secret (preserve initial user as before)

The behaviour of cluster() with inter-server secret had been changed in #63013,
after it started to use "default" user, and this introduces a
regression.

The intention of that patch was to adjust only remote(), since it only
it accept custom user, which should be ignored.

Fixes: #66287 (cc @den-crane @pufit )
Fixes: #66352 (cc @canhld94 )
Fixes: #63013

@robot-ch-test-poll robot-ch-test-poll added the pr-bugfix Pull request with bugfix, not backported by default label Jul 10, 2024
@robot-clickhouse-ci-1
Copy link
Copy Markdown
Contributor

robot-clickhouse-ci-1 commented Jul 10, 2024

This is an automated comment for commit bdfaffa with description of existing statuses. It's updated for the latest CI running

❌ Click here to open a full report in a separate page

Check nameDescriptionStatus
Stateless testsRuns stateless functional tests for ClickHouse binaries built in various configurations -- release, debug, with sanitizers, etc❌ failure
Successful checks
Check nameDescriptionStatus
AST fuzzerRuns randomly generated queries to catch program errors. The build type is optionally given in parenthesis. If it fails, ask a maintainer for help✅ success
Bugfix validationChecks that either a new test (functional or integration) or there some changed tests that fail with the binary built on master branch✅ success
BuildsThere's no description for the check yet, please add it to tests/ci/ci_config.py:CHECK_DESCRIPTIONS✅ success
ClickBenchRuns [ClickBench](https://github.com/ClickHouse/ClickBench/) with instant-attach table✅ success
Compatibility checkChecks that clickhouse binary runs on distributions with old libc versions. If it fails, ask a maintainer for help✅ success
Docker keeper imageThe check to build and optionally push the mentioned image to docker hub✅ success
Docker server imageThe check to build and optionally push the mentioned image to docker hub✅ success
Fast testNormally this is the first check that is ran for a PR. It builds ClickHouse and runs most of stateless functional tests, omitting some. If it fails, further checks are not started until it is fixed. Look at the report to see which tests fail, then reproduce the failure locally as described here✅ success
Flaky testsChecks if new added or modified tests are flaky by running them repeatedly, in parallel, with more randomization. Functional tests are run 100 times with address sanitizer, and additional randomization of thread scheduling. Integration tests are run up to 10 times. If at least once a new test has failed, or was too long, this check will be red. We don't allow flaky tests, read the doc✅ success
Install packagesChecks that the built packages are installable in a clear environment✅ success
Integration testsThe integration tests report. In parenthesis the package type is given, and in square brackets are the optional part/total tests✅ success
Performance ComparisonMeasure changes in query performance. The performance test report is described in detail here. In square brackets are the optional part/total tests✅ success
Stateful testsRuns stateful functional tests for ClickHouse binaries built in various configurations -- release, debug, with sanitizers, etc✅ success
Stress testRuns stateless functional tests concurrently from several clients to detect concurrency-related errors✅ success
Style checkRuns a set of checks to keep the code style clean. If some of tests failed, see the related log from the report✅ success
Unit testsRuns the unit tests for different release types✅ success
Upgrade checkRuns stress tests on server version from last release and then tries to upgrade it to the version from the PR. It checks if the new server can successfully startup without any errors, crashes or sanitizer asserts✅ success

@azat
Copy link
Copy Markdown
Member Author

azat commented Aug 1, 2024

Tests are not finished, fail: 6, passed: 1419, skipped

clickhouse-server: /build/src/Databases/DDLLoadingDependencyVisitor.cpp:216: static void DB::DDLLoadingDependencyVisitor::extractTableNameFromArgument(const ASTFunction &, Data &, size_t): Assertion `false' failed.

This problem had been fixed already long time ago, will do a rebase

@azat azat force-pushed the cluster-inter-server-secret-fix branch from 7e83005 to 189d184 Compare August 1, 2024 08:52
@azat
Copy link
Copy Markdown
Member Author

azat commented Aug 3, 2024

@pufit any clue why cloud fork sync failed? Does something required to be done from my side?

azat added 3 commits August 5, 2024 20:24
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
…n list

Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
The behaviour of cluster() with inter-server secret had been changed in ClickHouse#63013,
after it started to use "default" user, and this introduces a
regression.

The intention of that patch was to adjust only remote(), since it only
it accept custom user, which should be ignored.

Fixes: ClickHouse#66287
Fixes: ClickHouse#66352
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
@azat azat force-pushed the cluster-inter-server-secret-fix branch from 189d184 to 0dccc34 Compare August 5, 2024 18:24
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
@azat
Copy link
Copy Markdown
Member Author

azat commented Aug 6, 2024

@pufit pufit added this pull request to the merge queue Aug 7, 2024
Merged via the queue into ClickHouse:master with commit 3b642e7 Aug 7, 2024
@robot-ch-test-poll1 robot-ch-test-poll1 added the pr-synced-to-cloud The PR is synced to the cloud repo label Aug 7, 2024
@azat azat deleted the cluster-inter-server-secret-fix branch August 7, 2024 07:33
@azat
Copy link
Copy Markdown
Member Author

azat commented Aug 11, 2024

robot-clickhouse added a commit that referenced this pull request Aug 11, 2024
@robot-ch-test-poll3 robot-ch-test-poll3 added pr-backports-created-cloud deprecated label, NOOP pr-backports-created Backport PRs are successfully created, it won't be processed by CI script anymore labels Aug 11, 2024
robot-clickhouse added a commit that referenced this pull request Aug 11, 2024
Backport #66364 to 24.6: Fix cluster() for inter-server secret (preserve initial user as before)
robot-clickhouse-ci-2 added a commit that referenced this pull request Aug 11, 2024
Backport #66364 to 24.5: Fix cluster() for inter-server secret (preserve initial user as before)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-backports-created Backport PRs are successfully created, it won't be processed by CI script anymore pr-backports-created-cloud deprecated label, NOOP pr-bugfix Pull request with bugfix, not backported by default pr-synced-to-cloud The PR is synced to the cloud repo

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Table function cluster doesn't work when using cluster secret for authentication cluster + prefer_localhost_replica allows to query unprivileged data

6 participants