The on-disk upgrade process attempts to ensure that data in the vSAN cluster is not exposed to loss during the process. To accomplish this, the on-disk upgrade process will evacuate the disk group being upgraded prior to destroying and re-creating the disk group with the new on-disk format version. In minimally-sized configurations, certain ROBO configurations, or clusters with very small amounts of free space, this evacuation may not be possible in a manner that complies with the applicable storage policies. If the "Host Failures to Tolerate" policy specification is set to "1" (as it is by default), disk-group evacuation may not be possible in a policy-complaint manner.