Hi Paul,
IMO, if they are truly risk-adverse, they should follow the tested and
proven best practices, instead of doing things in a less tested way
which is also know to pose a danger to the data correctness.
If they must do this over a long period of time, then they may need to
temporarily
Hi Bowen,
Thanks for your quick reply.
Sorry I used the wrong term there, there it is a maintenance window rather than
an outage. This is a key system and the vital nature of it means that the
customer is rightly very risk adverse, so we will only even get permission to
upgrade one DC per nig
Hi Paul,
You don't need to plan for or introduce an outage for a rolling upgrade,
which is the preferred route. It isn't advisable to take down an entire
DC to do upgrade.
You should aim to complete upgrading the entire cluster and finish a
full repair within the shortest gc_grace_seconds (d
