Rolling upgrade certification results

View Source

UPGRADE AND ROLLBACK CERTIFICATION FAILED at replication factor 3. What broke is listed under Failures.

Measured with scripts/docker-upgrade-chaos.sh, the rolling upgrade and rollback drill. See Running the chaos drills for the other drills and what each one certifies.

Faults injected

  • p1: rolling every node from OLD to NEW (pin 7)
  • p1: mixed cluster (node 3 on NEW, nodes 1 and 2 on OLD)
  • p1: splitting the metadata ring from 4 to 5 vnodes on NEW
  • p2: rolling every node from NEW back to OLD (pin 7)
  • p3: rolling every node from OLD to NEW (pin 7)
  • p3: finalizing: the pin removed node by node
  • p3: switching the canary flag on
  • p3: node 3 started on OLD after the flip must refuse its data directory

Invariants

MeasureValue
Acknowledged writes still readable53,005
Post-chaos produce2,717 records/s

Failures

  • no produce was acknowledged through p3: node 3 without the pin, while malachi3 was down (stuck at 1465)
  • no produce was acknowledged through the refused rollback of node 3 (quorum on 2/3) (stuck at 3630)
  • nodes 1 and 2 did not serve a clean produce while node 3 was down
  • no produce was acknowledged through p3: node 3 back on NEW, while malachi3 was down (stuck at 3630)

Run details

MeasureValue
acked_writes_by_phasephase1: 18950, phase2: 12592, phase3: 21463
negative_controlfalse
old_machine_version7
old_refv0.22.4
old_rulethe newest release whose code differs from this tree, which is release v0.22.6's
old_shaf5070bcb07367c783871697b8903ec750807c6b4
old_version0.22.4
vnode_rulesharded: v0.22.4 resumes its vnode members after a restart
vnodes4
vnodes_after_split5

Reproduce

MeasureValue
Commandscripts/docker-upgrade-chaos.sh
Run at2026-11-03T11:49:30Z
Version0.22.6
Commitb8801b9 (2026-11-02T12:11:59Z)
CPUx86_64
Cores4
OSLinux 7.0.0-1017-azure