failover.become_passive

This method is only called manually by the end-user so we fully expect that they know what they’re doing. Furthermore, this method will only run if failover has NOT been administratively disabled. The reason why we only allow this in that scenario is because the failover logic (on the other node) will ignore any failover “event” that comes in if failover has been administratively disabled. This immediately causes the HA system to go into a “faulted” state because the other node will get the VIPs but it will not import the zpool and it will not start fenced. Only way out of that situation is to manually fix things (import zpool, migrate VIPs, start fenced, etc).

NOTE: The only “safe” way to “become passive” is to use the STCNITH method, or “Shoot The Current Node In The Head” (similar to STONITH).

This ensures that the current node gets out of the way completely so there is no chance of the zpool being imported at the same time on both nodes (which can ultimately end in data corruption).

Type: object

Type: array
No Additional Items

Result

Type: null

Returns null when the node successfully becomes passive.


Required roles: FAILOVER_WRITE