Hello Chris, A good strategy is found in our online documentation at
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/3-3-2/upgrading/upgrading-across-a-multi-site-cluster.htmlThere are a couple of additional items not discussed specifically on this page:
- In 3.3 you can add nodes to the primary site while the cluster is on
- In 3.3 you should NOT have two nodes in the primary site. When one of them has a problem there will be quorum loss, and the other node will become passive, not a good situation to be in. Please consider adding a third node. See page
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/3-3-2/deploying/set-up-a-cluster.html and the Cluster Synchronization, Promotion, and Recovery page under it
For your case the procedure would be as follows:
- Take one secondary site node out of the cluster and upgrade it.
- Stop the cluster.
- Upgrade your master node (first node in the primary site)
- On the master node update the cluster configuration to only include itself and the upgraded secondary node, then turn the cluster back on.
- Upgrade the remaining two nodes and join them back into the cluster.
- Add a third node to the primary site.
If adding a third node to the primary site is not an option, you might want to change the cluster configuration and create a new secondary site for your current second primary node, resulting in a 1-1-2 cluster instead of a 2-2 cluster.
Original Message:
Sent: 03-23-2020 01:17 PM
From: Chris Scott
Subject: Minimizing downtime in Multi-site cluster configuration
Hello,
Based on the requirements that all appliances must be on the same software version, I'm looking for a good strategy for upgrading while minimizing service downtime in a multi-site cluster configuration (given there are two sites, two members in each site).
I'm interested in any specific strategies the user community would like to share.
Thanks
Chris Scott