Service Flow Diagram for Cluster configuration for SPP

Hi All,

We have 3 Node SPP Cluster in which One primary and 2 replicas.

All three nodes are upgrading, but if you complete the upgrade in the main box and request a password, the password is not requested.
In this case, can I request a password only if all three nodes are upgraded? Please advice.

Kind Regards,

Jaeil.

Parents

0 ravneet kaur 10 months ago

Hi Jaeil,

During a cluster upgrade, the cluster is split logically into the current version (side A) and the upgrade version (side B). Access request workflow is only enabled on one side at a time. Audit logs run on both sides and merge when the cluster patch completes. Initially, access request workflow is only enabled on side A, and replicas in PatchPending state can perform access requests.

As appliances upgrade and move to side B, the access workflow migrates to side B when side B has a majority of the appliances. At this point in the upgrade process, replicas in PatchPending state can no longer perform access requests.

However, all of the upgraded cluster members can perform access requests. There is a small window where access request workflow is unavailable as the data migrates from one side to the other.

Please refer to the admin guide below:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.0.3.1%20lts/administration-guide/114#TOPIC-2048531

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Reply

0 ravneet kaur 10 months ago

Hi Jaeil,

During a cluster upgrade, the cluster is split logically into the current version (side A) and the upgrade version (side B). Access request workflow is only enabled on one side at a time. Audit logs run on both sides and merge when the cluster patch completes. Initially, access request workflow is only enabled on side A, and replicas in PatchPending state can perform access requests.

As appliances upgrade and move to side B, the access workflow migrates to side B when side B has a majority of the appliances. At this point in the upgrade process, replicas in PatchPending state can no longer perform access requests.

However, all of the upgraded cluster members can perform access requests. There is a small window where access request workflow is unavailable as the data migrates from one side to the other.

Please refer to the admin guide below:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.0.3.1%20lts/administration-guide/114#TOPIC-2048531

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Children

No Data