Skip to content

Commit 2e61aa7

Browse files
Merge pull request #212323 from msftrobiro/patch-1
SAP pacemaker SLES - MSI support for SLES12 SP5
2 parents 9758a55 + b4fe01c commit 2e61aa7

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

articles/virtual-machines/workloads/sap/high-availability-guide-suse-pacemaker.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -472,7 +472,7 @@ This section applies only if you want to use a fencing device with an Azure fenc
472472
This section applies only if you're using a fencing device that's based on an Azure fence agent. The fencing device uses either a managed identity or a service principal to authorize against Microsoft Azure.
473473

474474
#### Using managed identity
475-
To create a managed identity (MSI), [create a system-assigned](/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm#system-assigned-managed-identity) managed identity for each VM in the cluster. Should a system-assigned managed identity already exist, it will be used. User assigned managed identities should not be used with Pacemaker at this time. Fence device, based on managed identity is supported on SLES 15 SP1 and above.
475+
To create a managed identity (MSI), [create a system-assigned](/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm#system-assigned-managed-identity) managed identity for each VM in the cluster. Should a system-assigned managed identity already exist, it will be used. User assigned managed identities should not be used with Pacemaker at this time. Azure fence agent, based on managed identity is supported for SLES 12 SP5 and SLES 15 SP1 and above.
476476

477477
#### Using service principal
478478

@@ -639,9 +639,11 @@ Make sure to assign the custom role to the service principal at all VM (cluster
639639
> The installed version of the *fence-agents* package must be 4.4.0 or later to benefit from the faster failover times with the Azure fence agent, when a cluster node is fenced. If you're running an earlier version, we recommend that you update the package.
640640
641641
>[!IMPORTANT]
642-
> If using managed identity, the installed version of the *fence-agents* package must be fence-agents 4.5.2+git.1592573838.1eee0863 or later. Earlier versions will not work correctly with a managed identity configuration.
643-
> Currently only SLES 15 SP1 and newer are supported for managed identity configuration.
644-
642+
> If using managed identity, the installed version of the *fence-agents* package must be
643+
> SLES 12 SP5: fence-agents 4.9.0+git.1624456340.8d746be9-3.35.2 or later
644+
> SLES 15 SP1 and higher: fence-agents 4.5.2+git.1592573838.1eee0863 or later.
645+
> Earlier versions will not work correctly with a managed identity configuration.
646+
645647
1. **[A]** Install the Azure Python SDK and Azure Identity Python module.
646648

647649
Install the Azure Python SDK on SLES 12 SP4 or SLES 12 SP5:
@@ -799,7 +801,7 @@ Make sure to assign the custom role to the service principal at all VM (cluster
799801
> The 'pcmk_host_map' option is required in the command only if the hostnames and the Azure VM names are *not* identical. Specify the mapping in the format *hostname:vm-name*.
800802
> Refer to the bold section in the following command.
801803
802-
If using **managed identity** for your fence agent, run the following command (SLES 15 SP1 and newer, only)
804+
If using **managed identity** for your fence agent, run the following command
803805
<pre><code>
804806
# replace the bold strings with your subscription ID and resource group of the VM
805807

0 commit comments

Comments
 (0)