Optimize ZooKeeper node count

The article details instructions on how to reduce the ZooKeeper (ZK) node count. The optimization mitigates the issue with getting secrets from Secrets Vault. Additionally, it decreases the traffic to ZK from all Master servers, thus improving the overall platform stability.

note

This is a recommended one-time service fix. Once you complete the steps below, you don't have to repeat them.

To optimize the ZK node count, follow the steps below:

1. Set time-to-live (TTL) for Vault tokens:

   1. SSH to the Master server (each Master in the HA environment).
   2. Open /opt/workfusion/vault/server.hcl.
   3. Set the default_lease_ttl value to "7200".
   4. Set the max_lease_ttl value to "14400".

2. Synchronize the Vault's default_lease_ttl TTL with the conf. value set for the Marathon authentication plugin:

   1. SSH to the Master server (each Master in the HA environment).
   2. Open /opt/workfusion/marathon/plugin/plugin-conf.json.
   3. Change the value in plugins->authentication->configuration->vault->cacheTTLms to 7200000.

3. Restart the Vault and Marathon services.