[ClusterLabs] Why would a standby node be fenced? (was: How to set up fencing/stonith)

[Casey & Gina]

> On May 25, 2018, at 7:01 AM, Casey Allen Shobe <caseyandgina at icloud.com> wrote:
> 
>> Actually, why is Pacemaker fencing the standby node just because a resource fails to start there?  I thought only the master should be fenced if it were assumed to be broken.

This is probably the most important thing to ask outside of the PAF resource agent which many may not be as fluent with as pacemaker itself, and perhaps the most indicative of me setting something up incorrectly outside of that resource agent.

My understanding of fencing was that pacemaker would only fence a node if it was the master but had stopped responding, to avoid a split-brain situation.  Why would pacemaker ever fence a standby node with no resources currently allocated to it?

Regards,
-- 
Casey