v.25.7Improvement

Add new config keeper_server

Official CH changelog text
Keeper improvement: add new config keeper_server.cleanup_old_and_ignore_new_acl. If enabled, all nodes will have their ACLs cleared while ACL for new requests will be ignored. If the goal is to completely remove ACL from nodes, it's important to leave the config enabled until a new snapshot is created. #82496 (Antonio Andelic).
Added a new configuration option keeper_server.cleanup_old_and_ignore_new_acl that, when enabled, clears all existing ACLs on Keeper nodes and ignores ACLs in new requests.

Why it matters

This feature allows users to completely remove ACLs from Keeper nodes by clearing old ACLs and preventing new ACL entries from being applied. It is useful during ACL removal processes, ensuring the system operates without ACL restrictions until a new snapshot is created.

How to use it

Enable the keeper_server.cleanup_old_and_ignore_new_acl configuration option in the Keeper server configuration. Keep this option enabled until a new snapshot is created to ensure ACLs are fully cleared and ignored.

Related resources

PreviousNext