Skip to main content

Illumio Core 24.5 Install, Configure, Upgrade

Assign New Leader

A Supercluster can only have one leader at a time. The following section describes how to choose a new leader or temporarily assign a new leader when the leader has failed and you need to change the Supercluster before it can be recovered.

Assign Leader When a Leader Is Connected

You can choose a new Supercluster leader when the existing leader is still running and connected to the rest of the Supercluster. When you choose a new leader, the former leader becomes a member in the Supercluster.

  1. Decide which PCE member you want to be the new leader.

  2. On any node of each PCE in the Supercluster, set the runlevel to 2:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 2

    Make sure you wait until the software is running before you proceed.

  3. Check the progress to see when the status is RUNNING on all nodes:

    sudo -u ilo-pce illumio-pce-ctl cluster-status -w

  4. On any node on the new leader, promote it to be the leader:

    sudo -u ilo-pce illumio-pce-ctl supercluster-assign-leader

  5. On any node on the new leader and the former leader, bring both PCEs to runlevel 5:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 5

  6. Check the progress to see when the status is RUNNING on all nodes:

    sudo -u ilo-pce illumio-pce-ctl cluster-status -w
Assign New Leader When Leader Has Failed

When your Supercluster leader has failed, you must drop the failed leader from the Supercluster before you can assign a new leader.

Warning

When the new leader is promoted, you must isolate the former leader from the network and not allow it to be brought back online. When the former leader is not isolated, it will incorrectly re-join the Supercluster as the leader. Having two leaders in a Supercluster is not supported and can lead to data corruption.

When you are ready to restore the failed PCE and rejoin it to the Supercluster, follow the procedures in Restore a PCE or Entire Supercluster, which will bring the PCE back as a member. After it has been brought back as a member, you can assign it to be the leader again.

To drop the failed leader and assign a new leader:

  1. On a core node of each surviving PCE in the Supercluster, set the runlevel to 2:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 2

  2. On the PCE you assigned as the new leader, drop the failed leader from the Supercluster:

    sudo -u ilo-pce illumio-pce-ctl supercluster-drop failed_PCE_fqdn

  3. Check the progress to see when the status is RUNNING:

    sudo -u ilo-pce illumio-pce-ctl cluster-status -w

  4. On the newly designated leader PCE, assign is as the new Supercluster leader:

    sudo -u ilo-pce illumio-pce-ctl supercluster-assign-leader

  5. On the new leader PCEandall member PCEs, set them to runlevel 5:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 5

    Make sure you wait until the software is running before you proceed.

  6. Check the progress to see when the status is RUNNING on all nodes:

    sudo -u ilo-pce illumio-pce-ctl cluster-status -w