Well there are a lot of Red Hat solutions about that one. You will need a user in ovirt that will be used to restart the VMs. In my case , I called it 'fencerdrbd' and it has beed granted 'UserRole' permissions on the systems in the pacemaker cluster.
Here is my stonith device , but keep in mind that I added the engine's CA to the VMs so I use 'ssl_secure=1': [root@drbd1 ~]# pcs stonith show ovirt_FENCE Resource: ovirt_FENCE (class=stonith type=fence_rhevm) Attributes: ipaddr=engine.localdomain login=fencerdrbd@internal passwd=<REPLACED> pcmk_host_map=drbd1.localdomain:drbd1;drbd2.localdomain:drbd2;drbd3.localdomain:drbd3 power_wait=5 ssl=1 ssl_secure=1 Operations: monitor interval=86400s (ovirt_FENCE-monitor-interval-86400s) The VMs hostname to VM name mapping is done via pcmk_host_map option. Keep in mind that due to VM live migration , it is nice to have a token and consensus increased.Mines are 10000 for token and 12000 for consensus (3 VM cluster) , in your case (2 node) 8000 would be OK. If you use the 'admin@internal' user - you need to use '--disable-http-filter' : # pcs stonith update fence_device disable_http_filter=1 Extra info can be found at: https://access.redhat.com/solutions/3093891 Best Regards, Strahil Nikolov В неделя, 11 октомври 2020 г., 18:41:25 Гринуич+3, Jeremey Wise <jeremey.w...@gmail.com> написа: I have a pair of nodes which service DNS / NTP / FTP / AD /Kerberos / IPLB etc.. ns01, ns02 These two "infrastructure VMs have HA Proxy and pacemaker and I have set to have "HA" within ovirt and node affinity. But.. within HAProxy, the nodes use to be able to call the STONITH function of KVM to reset a node if / as needed. Fence Device: "stonith:fence_virsh" But with oVirt this function no longer works. For VMs and other applications which need STONITH functions, how would this be done with oVirt. I would assume the call would be to oVirt-Engine now, but not seeing documentation on HA-Proxy / Pacemaker to use oVirt. Can someone point me in the right direction? -- penguinpages _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/B4KLZLPAIZMUMUEIUOSPLEI23UAGZVJM/ _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/46FACPOSPGBIRDHQC67WZQA3O2CFYESN/
