US 11,914,686 B2
Storage node security statement management in a distributed storage cluster
Luis Pablo Pabón, Sturbridge, MA (US)
Assigned to Pure Storage, Inc., Santa Clara, CA (US)
Filed by Pure Storage, Inc., Mountain View, CA (US)
Filed on Oct. 15, 2021, as Appl. No. 17/502,375.
Prior Publication US 2023/0119767 A1, Apr. 20, 2023
Int. Cl. G06F 21/30 (2013.01); G06F 3/06 (2006.01); G06F 21/60 (2013.01)
CPC G06F 21/30 (2013.01) [G06F 3/0623 (2013.01); G06F 3/0634 (2013.01); G06F 3/067 (2013.01); G06F 21/60 (2013.01)] 20 Claims
OG exemplary drawing
 
16. A non-transitory computer-readable medium storing instructions that, when executed, direct a processor of a computing device to perform a process for controlling storage nodes that have respective security states, the process comprising:
tracking the security states of the respective storage nodes;
when, according to the tracking, the security states of all of the storage nodes joined in a distributed storage cluster are in a secured state, initiating a first reboot procedure of the storage nodes, the first reboot procedure comprising the storage nodes rebooting to change their respective security states from the secured state to an intermediate state, wherein during the first reboot procedure:
storage nodes that have rebooted to have their respective security states change to the intermediate state are allowed to join the distributed storage cluster, and
storage nodes that have their security state in an unsecured state are not allowed to join the distributed storage cluster, wherein the unsecured state corresponds to not requiring credentials with respect to the distributed storage cluster, and wherein the secured state corresponds to requiring credentials with respect to the distributed storage cluster; and
based on determining, according to the tracking, that all of the storage nodes joined in the distributed storage cluster have their respective security states in the intermediate state, performing a second reboot of the storage nodes, the second reboot comprising rebooting the storage nodes to change their respective security states from the intermediate state to the unsecured state, wherein, during the second reboot, storage nodes that have rebooted to change their respective security states to the unsecured state are allowed to join the distributed storage cluster.