Troubleshoot Service Fabric Cluster Upgrade Issues

We refer Service Fabric Cluster Upgrade as the Fabric Upgrade. Fabric Upgrade failures can be caused by multiple reasons, some common issues were listed below:

  1. Missing seed node or not enough seed node number to match cluster reliability settings.
  2. Upgrade stuck for waiting for PreUpgradeSafetyCheck/SafetyCheck
  3. Upgrade timeout due to incorrect upgrade settings and health policy settings, such as slow processing of upgrade domain due to a disk IO performance issue or incorrect (too short) timeout settings.
  4. There are some customer SF applications in error state during cluster upgrade which fail our MaxPercentUnhealthyApplications evaluation
  5. Delta unhealthy (either node or application) evaluation failed. but typically we may not pay much attention in those delta Nodes or Applications CheckHealthEvaluation settings.
  6. Cluster manifest upgrade interrupted and rolled back automatically by SFRP resource provider.
  7. Cluster upgrade stuck on node due to installation package failure
  8. Cluster upgrade stuck due to Fabric Installer crash or hang issues. For example, you disabled the windows upgrade or didn't configure POA (Patch Orchestration Application) correctly, FabricInstallerSvc is missing the required C/C++ runtime packages.

In order to get root cause analysis (RCA), you can open a support ticket with Microsoft or self help first by quickly checking Upgrade details from either Get-ServiceFabricClusterUpgrade PowerShell command or from Service Fabric Explorer (SFX).

  1. Check your Portal/Service Fabric /Overview blade

    After clicking the above error link,  you will see the error details, for example:
  2. Check Service Fabric Explorer (SFX)
    • Open your SFX Url link from portal, click "Cluster" and go to the "DETAILS" Tab, for example, my SFX Url is
    • First, you will see the Upgrade Domain walk and UD processing information
    • Second, you will get the Health and Monitoring Policy and Timeout settings

    • Finally, you will be able to see the current upgrade status and what the upgrade is working on.
    • For my scenario, it is waiting for EnsureSeedNodeQuorum for about 1:20+ hours. Now, you narrowed down the issue to ENUM type EnsureSeedNodeQuorum. You can check the explanation for it @ and start to understand the possible cause of the problem.
  3. Use PowerShell Get-ServiceFabricClusterUpgrate to get the upgrade status and error during and after the upgrade
    • Call Connect-ServiceFabricCluster from a RDP session on one of primary nodetype node without any parameter. Since you are in VM already, this will bypass the security check. Or you can pass the X509Certificate or AADCredential to create the PowerShell connection per Connect-ServiceFabricCluster doc.

    • Call Get-ServiceFabricClusterUpgrade during the Fabric Upgrade or even after the Fabric Upgrade.

      For my situation in above screenshot, the upgrade domain 1 stuck on the PreUpgradeSaftyCheck for EnsureSeedNodeQuorum till upgrade domain timeout.
      Now, you narrow down the issue to ENUM type  EnsureSeedNodeQuorum. You can check the additional explanation for it @
  4. Additional, RDP into the node and check event viewer for "Microsoft-Service Fabric" Admin and Operational Event logs
    • RDP and Open eventvwr from a Service Fabric cluster node
    • Check Application and Services Logs \ Microsoft-Service Fabric Event
      check both Admin/Operational events for errors and warnings details

      Now the issue is identified as a seed node missing problem.

Comments (0)

Skip to main content