tree b6a7f84b0d7d8e1d4531883eac22dab990c6f1c7
parent fc6e1cf11d0d96fac1e8d52b5787b207f8b1fd9f
author Jan Schär <jan@monogon.tech> 1726574194 +0200
committer Jan Schär <jan@monogon.tech> 1727351049 +0000

m/node/core: remove etcd membership before removing consensus role

When removing the consensus role, we also need to remove etcd
membership. It is safer to remove membership first, and then the role,
because otherwise, the etcd cluster is in a degraded state during the
time where etcd on the node has been stopped, but the node is still
counted as a voting member by etcd.

If the membership is removed, but then removing the role fails, the
cluster ends up in an inconsistent state. If the affected node was the
curator or etcd leader, that will almost certainly happen. In this case,
the request can just be retried until it succeeds, and then the cluster
state is consistent again between etcd membership and roles.

Change-Id: I1ab526470a4201e76817e8ca0a597996fb903d1f
Reviewed-on: https://review.monogon.dev/c/monogon/+/3437
Tested-by: Jenkins CI
Reviewed-by: Serge Bazanski <serge@monogon.tech>