Skip to content

Conversation

@nrwahl2
Copy link
Contributor

@nrwahl2 nrwahl2 commented Nov 11, 2025

stonith-enabled has been deprecated in favor of fencing-enabled. I missed a few things when doing that.

For one thing, we're still using stonith-enabled in a few places internally. I must have only checked the C files. We should be using the new fencing-enabled except where we need stonith-enabled explicitly for backward compatibility.

For another, the controld resource agent can misbehave if fencing-enabled is set. That agent only checks the value of stonith-enabled. If fencing-enabled is set, it overrides any value that may be set for stonith-enabled.

We also replace and deprecate stonith-timeout-ms in the crm_mon output here, fix a minor bug in the controld RA, and drop an occurrence of the deprecated cluster-ipc-limit from a scheduler input.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
To replace stonith-enabled. This affects XML output for the crm_mon CLI
tool and the pcmk_status() public API function.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
To replace stonith-timeout-ms. This affects XML output for the crm_mon
CLI tool and the pcmk_status() public API function.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Look for fencing-enabled instead.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Look for fencing-timeout-ms instead.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Cluster properties are processed case-insensitively. So for example,
either "fencing-ENABLED" or "STONITH-enabled" would set the
pcmk__sched_fencing_enabled flag at unpack time. Thus, querying the
"stonith-enabled" attribute is an incomplete check.

Likewise for the no-quorum-policy attribute. Also, its value in the CIB
may be "freeze" but with some uppercase letters.

We fix both of these issues by running crm_mon instead of crm_attribute.
crm_mon's XML output includes a cluster_options element with attributes
for some important cluster properties. These are set not from the CIB
directly, but rather from the scheduler data. The scheduler has already
handled things like case-insensitivity, alternate option names, etc.
Further, the crm_mon output contains standardized values:
* stonith-enabled is set to "true" or "false" by pcmk__flag_text().
* no-quorum-policy is set to one of a few lowercase string values by
  no_quorum_policy_text().

This makes for easy and correct comparisons.

Also, refer to "fencing-enabled" instead of the deprecated
"stonith-enabled".

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
This duplicates allow_stonith_disabled, which is about to be deprecated.

Also, drop setting of OCF_RESKEY_sctp, which is unused.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
This property is deprecated.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
@nrwahl2 nrwahl2 requested a review from clumens November 11, 2025 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant