As described in issue 1163, gnt-cluster master-failover without --no-voting and without a healthy majority breaks the cluster entirely. Therefore, refuse the operation in this situation with an appropriate explanation.
Klaus Aehlig (4): Fix outdated comment Add a predicate testing that a majority of nodes is healthy Check for healthy majority on master failover with voting Document healthy-majority restriction on master-failover lib/bootstrap.py | 24 ++++++++++++++++++++++-- lib/client/gnt_cluster.py | 8 ++++++++ man/gnt-cluster.rst | 6 ++++++ 3 files changed, 36 insertions(+), 2 deletions(-) -- 2.6.0.rc2.230.g3dd15c0
