> Do you mean: shutdown whole cluster before manual recovery finished? > > If user start manual recovery, and add some new nodes info cluster, and > then shutdown the cluster directly, I think the cluster should kept the original > status, just like not adding any new nodes into cluster. I simply do not want 'automatic' discovery. Instead, I think the admin should trigger that. So far, you implemented a way to turn it off, but that flag does not survive a cluster restart? |