Skip to content

Conversation

@LZD-PratyushBhatt
Copy link

Issues

  • My PR addresses the following Helix issues and references them in the PR description:

(#200 - Link your issue number here: You can write "Fixes #XXX". Please use the proper keyword so that the issue gets closed automatically. See https://docs.github.com/en/github/managing-your-work-on-github/linking-a-pull-request-to-an-issue
Any of the following keywords can be used: close, closes, closed, fix, fixes, fixed, resolve, resolves, resolved)
This PR closes #3041 , adds support for Maintenance mode Stacking.

Description

  • Here are some details about my PR, including screenshots of any UI changes:

(Write a concise description including what, why, how)
The current implementation of maintenance mode for clusters supports only a single reason at a time, tracked using the simpleFields.REASON key. This restricts the functionality to a single actor and reason, which limits flexibility and coordination.

This proposal introduces a new design that allows multiple actors to independently place a cluster into maintenance mode for different reasons. We will extend the maintenance mode design to support multiple actors, each capable of independently adding or removing their own maintenance reason. The cluster will remain in maintenance mode as long as at least one active reason exists. Each reason will be associated with metadata such as the actor, reason, and timestamp. For backwards compatibility, the existing simpleFields.REASON will be retained and updated to reflect the most recent active reason. If a reason is removed, it will be replaced with the next most recent one. While legacy clients that remove the entire znode cannot be completely prevented, we will handle such cases gracefully and recommend migrating to an updated API that enables proper multi-actor maintenance handling.

Tests

  • The following tests are written for this issue:
    testAutomationMaintenanceMode, testRemoveMaintenanceReasonNoDuplicates, testLegacyClientCompatibility, testMaintenanceHistoryAfterOperationFlag, testMultiActorMaintenanceModeExitSequence, testMultiActorMaintenanceModeReconciliation, testMultiActorMaintenanceModeOldClientExit, testMultiActorMaintenanceModeOldClientOverride, testMultiActorMaintenanceModeInvalidExit

(List the names of added unit/integration tests)

  • The following is the result of the "mvn test" command on the appropriate module:

(If CI test fails due to known issue, please specify the issue and test PR locally. Then copy & paste the result of "mvn test" to here.)

Changes that Break Backward Compatibility (Optional)

  • My PR contains changes that break backward compatibility or previous assumptions for certain methods or API. They include:

(Consider including all behavior changes for public methods or API. Also include these changes in merge description so that other developers are aware of these changes. This allows them to make relevant code changes in feature branches accounting for the new method/API behavior.)

Documentation (Optional)

  • In case of new functionality, my PR adds documentation in the following wiki page:

(Link the GitHub wiki you added)

Commits

  • My commits all reference appropriate Apache Helix GitHub issues in their subject lines. In addition, my commits follow the guidelines from "How to write a good git commit message":
    1. Subject is separated from body by a blank line
    2. Subject is limited to 50 characters (not including Jira issue reference)
    3. Subject does not end with a period
    4. Subject uses the imperative mood ("add", not "adding")
    5. Body wraps at 72 characters
    6. Body explains "what" and "why", not "how"

Code Quality

  • My diff has been formatted using helix-style.xml
    (helix-style-intellij.xml if IntelliJ IDE is used)

@LZD-PratyushBhatt
Copy link
Author

Hi @junkaixue , @GrantPSpencer , @zpinto , @xyuanlu
Can you please review this PR? Its for supporting MM stacking.

@LZD-PratyushBhatt LZD-PratyushBhatt force-pushed the maintenance_mode_stacking branch from 9cb7f35 to b6a081b Compare May 19, 2025 07:47
return false;
}

return signal.hasMaintenanceReasons();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This can be dangerous. What if the new version read an old ZNode.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated the code.

@junkaixue
Copy link
Contributor

Highly recommend the new contributor starting with stablizing the tests instead of touch the very core part. It is very very dangerous. There was one line log change can blast the entire server before.

If you still believe your change is solid, we can help review. At the same time, please never lower the bar.

@LZD-PratyushBhatt
Copy link
Author

Highly recommend the new contributor starting with stablizing the tests instead of touch the very core part. It is very very dangerous. There was one line log change can blast the entire server before.

If you still believe your change is solid, we can help review. At the same time, please never lower the bar.

Hey @junkaixue, Yes I believe the current version of the change is solid and is in good shape. I have tested the change thoroughly with multiple test cases.
Please take a look at this once you get time! Thanks a lot for your time!

Copy link

@proud-parselmouth proud-parselmouth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for this effort, this is one complicated logic. I think you have covered all the scenarios, keep up the good work.
Can you PTAL at my review comments, seems like we can refactor this code more.

* @param reason
* @param customFields user-specified KV mappings to be stored in the ZNode
*/
void automationEnableMaintenanceMode(String clusterName, boolean enabled, String reason,

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are already 3 methods which similar name, enableMM, autoEnableMM, manuallyEnableMM and now automationEnableMaintenanceMode.
I have multiple queries here

  1. Is there a reason to not why we are not overloading the new method with the existing name autoEnableMM
  2. IMO, there should only be one method enableMM with different triggering entities. Should we create an issue in apache helix as todo for this?

// The cluster is in maintenance mode if the maintenance signal ZNode exists
// This includes cases where old clients have wiped listField data but simpleFields remain
// cluster should remain in maintenance mode as long as ZNode exists
return signal.hasMaintenanceReasons() ||

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we remove the check for the empty string, as this may break backward compatibility?

logger.info("Entity {} doesn't have a maintenance reason entry, exit request ignored", triggeringEntity);
}
}
} else {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This else shouldn't be needed, do an early check after if(!enabled) and exit from the method if maintenance signal is null

* @return true if a reason was removed, false otherwise
*/
public boolean removeMaintenanceReason(TriggeringEntity triggeringEntity) {
LOG.info("Removing maintenance reason for entity: {}", triggeringEntity);

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This method needs to be refactored.

  1. Get maintenance reasons = getMaintenanceReasons()
  2. Get filtered reasons filteredReasons = filterReasons(reasons, null, triggeringEntity). Write a method that would take includeEntities list and excludeEntitiesList
  3. Return false early, if !filteredReasons.size().equals(reasons.size())
  4. In the list fields reasons we are always adding the reasons at the end, hence the above array filteredReasons should aways be sorted
  5. Always Set/Reset the simpleFields if filteredReasons.size() != 0
  6. Return true.

// The triggering entity is our unique key - Overwrite any existing entry with this entity
String triggerEntityStr = triggeringEntity.name();

List<Map<String, String>> reasons = getMaintenanceReasons();

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here you filterOut the reasons which for the given triggeringEntity and then always add the reason as a new reason at the end of the reasons list

* @param triggeringEntity The entity to check
* @return true if there is a maintenance reason from this entity
*/
public boolean hasMaintenanceReason(TriggeringEntity triggeringEntity) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we use filterReasons instead of this method, the caller can add a check on size, or this method can add a check on size.
Again I don't see an explicit need of this method

* @param triggeringEntity The entity to get reason details for
* @return Map containing reason details, or null if not found
*/
public Map<String, String> getMaintenanceReasonDetails(TriggeringEntity triggeringEntity) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems similar to filterReasons, why is it public?

*
* @return The count of active maintenance reasons
*/
public int getMaintenanceReasonsCount() {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we need this.

* @param triggeringEntity The entity to get reason for
* @return The reason string, or null if not found
*/
public String getMaintenanceReason(TriggeringEntity triggeringEntity) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Where is this called?
can we instead do at the caller

reasons = filterReasons(getMainteanancerReasons(), List.of(triggeringEntity), null)
String mr = reasons.size() != 0 ? reasons.get(0).getOrDefault(REASON, null) : null


// Only reconcile USER data from legacy clients
// CONTROLLER and AUTOMATION should not have legacy data loss scenarios
if (simpleReason != null && !simpleReason.isEmpty() && simpleEntity == TriggeringEntity.USER

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This might be more readable, if we return early like this

reasons = getMaintaneanceReasons()
if (simpleReason == null || simpleReason.isEmpty() || filterReasons(reasons, TriggeringEntity.USER).size() > 0){
   return
}
... rest of the logic.

@LZD-PratyushBhatt LZD-PratyushBhatt force-pushed the maintenance_mode_stacking branch from 4e9cf85 to 4f829df Compare July 16, 2025 01:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Maintenance mode stacking support

4 participants