By: Mursel Koseer user 06 Dec 2024 at 5:49 a.m. CST

5 Responses
Mursel Koseer gravatar
Hi, I have a few questions about the cluster manager: 1. **Optimal Environment for Production**: What is the best environment to set up the cluster manager to ensure it is always available for production? Currently, we have installed the cluster manager on WSL in a Windows server. Is this a good setup, or is there a better way to host the cluster manager? 2. **Web App Availability**: To host the web app of the cluster manager, we use the command clustermgr5-cli start. Does this web app need to be online at all times, or will there be issues if it goes offline, particularly concerning the "key rotation" functionality of the cluster manager? 3. **Health Check Endpoint**: Does the cluster manager provide an endpoint or service to check its health? If not, what is the best way to implement this? Best regards,

By Mohib Zico Account Admin 06 Dec 2024 at 6:25 a.m. CST

Mohib Zico gravatar
Hi Mursel, >> Optimal Environment for Production:... "Cluster Manager" itself not mandatory to run 24x7 actually and it's performance doesn't reflect Production Gluu Cluster. It's just a tool to setup and periodic monitor your Gluu Server cluster. >> Currently, we have installed the cluster manager on WSL in a Windows server. Is this a good setup, or is there a better way to host the cluster manager? We are not a great fan of Windows and as far as I remember we don't _officially_ support Cluster Manager in Windows platform. From experience... any DEB/RPM distribution has been a great choice. >> Web App Availability:... It's not mandatory as I mentioned earlier. >> will there be issues if it goes offline, particularly concerning the "key rotation" functionality of the cluster manager? This is a good question, it didn't came into my mind. I'll ask around. >> Health Check Endpoint: ... Cluster Manager itself does it's monitoring but it's only exposed to Cluster Manager [GUI](https://gluu.org/docs/cm/4.4/deploy/#monitoring) However, Gluu Server's own health check endpoints are available which you can use. [Here](https://gluu.org/docs/gluu-server/4.5/operation/health-check/) are they.

By Mursel Koseer user 06 Dec 2024 at 6:46 a.m. CST

Mursel Koseer gravatar
Hi Mohib, I appreciate it. I'll wait for your feedback about the CM availability for the key rotation. For example, the cluster managers availability is not required for LDAP replication because these configurations are stored on the Gluu servers. However, for the "key rotation" functionality, I noticed in the LDAP logs of the cluster manager that it modifies the LDAP oxAuth keys (public keys) at regular intervals.

By Mohib Zico Account Admin 06 Dec 2024 at 10:37 a.m. CST

Mohib Zico gravatar
Yes, you are correct. Just confirmed with Cluster Manager team... we need to run CM running if we use Key rotation feature there.

By Mursel Koseer user 09 Dec 2024 at 3:23 a.m. CST

Mursel Koseer gravatar
Okay I understand. We will put the CM in a Ubuntu environment so the CM is always available for the key rotation. Thanks for the clarification.

By Mohib Zico Account Admin 10 Dec 2024 at 8:34 p.m. CST

Mohib Zico gravatar
Sounds good, thanks!