Page History

...

In normal operating cases, failover to another controller will happen automatically. Unclean recovery is intended to be used during emergencies where it is possible that the quorum may be partially degraded or the controller is extremely busy keeping track of activity in the cluster. Adding this to the controller also adds complexity to the logic and operation of a sensitive aspect of cluster operation (leadership election) during emergencies. It is unclear whether users "unclean.election.enable=true" users would see "unclean.recovery.strategy" as a significant improvement over the current "random" algorithm to justify thisthe complexity. For unclean recovery which is not initiated by the controller, there is not an obvious advantage provided given safety guarantees of designated leadership elections.

...