Chapter 2. Getting started with the HA Cluster Management add-on for the RHEL web console
The HA Cluster Management RHEL web console add-on is a graphical user interface to create and configure Pacemaker clusters. The HA Cluster Management RHEL web console add-on is available through the RHEL web console when the cockpit-ha-cluster
package is installed.
Previous releases of Red Hat Enterprise Linux utilized the pcsd
Web UI as the standalone graphical user interface for HA cluster configuration. This interface has been modified to be usable as a RHEL web console add-on and is no longer operated as a standalone interface.
2.1. Installing and enabling the HA Cluster Management add-on for the RHEL web console
To use the HA Cluster Management add-on to configure a high availability cluster, add the HA Cluster Management application to the RHEL web console and install and enable the necessary Red Hat High Availability Add-On software packages and services on each node in your cluster.
Prerequisites
You have installed the RHEL 10 web console.
For instructions, see Installing and enabling the web console.
Procedure
- From the system on which you are running the RHEL web console, log in to the console and install the HA Cluster Management add-on application. See Add-on applications for the RHEL web console in the "Managing systems in the RHEL web console" document for details.
On each cluster node, install the Red Hat High Availability fence agents from the High Availability channel.
dnf install fence-agents-all
# dnf install fence-agents-all
Copy to Clipboard Copied! You can install only the fence agent that you require with the following command.
dnf install fence-agents-model
# dnf install fence-agents-model
Copy to Clipboard Copied! On each cluster node, ensure that the
pcsd
service is running.systemctl status pcsd.service
# systemctl status pcsd.service
Copy to Clipboard Copied! If the
pcsd
service is not running on a cluster node, enter the following command to start thepcsd
service and to enable it at system start.systemctl enable --now pcsd.service
# systemctl enable --now pcsd.service
Copy to Clipboard Copied! Ensure you are logged in to the RHEL web console. To use the RHEL web console to create clusters, the user account used to sign in to the web console must have sudo access to the system.
NoteThe
hacluster
user account is the Pacemaker service account and you cannot use this account to log in to the RHEL web console.- In the RHEL web console, switch to administrative access mode. For information about administrative access mode, see Administrative access in the web console in the "Managing systems in the RHEL web console" document.
Only a user with sudo access can create clusters and add nodes to existing ones. After you create a cluster, by default, users in the haclient
group can manage the cluster and change permissions. For information about granting different permissions to any other users and groups that require them, or for modifying the default haclient
permissions, see Granting HA Cluster Management permissions.
2.2. Granting HA Cluster Management permissions
Each cluster can have a different set of permissions used for its administration. A user with administrative access or full permissions can grant full permissions to other users and groups for the HA Cluster Management web console add-on.
The following table summarizes the cluster management permissions you can grant for the HA Cluster Management web console add-on.
Permission | Allowed administrative task |
---|---|
Read | Viewing cluster settings. |
Write | Modifying all cluster settings except permissions and ACLs. Does not allow adding nodes and creating clusters. |
Grant | Modifying ACLs and granting read, write, and grant permissions. |
Full | Performing all cluster management except adding nodes or creating clusters. |
Prerequisites
- You have installed and enabled the HA Cluster Management add-on for the RHEL web console, as described in Installing and enabling the HA Cluster Management add-on for the RHEL web console.
- You have created a cluster for which you want to manage permissions and it has been added to the cluster list in the HA Cluster Management add-on.
Procedure
Log in to the RHEL web console with an account that has sudo access to the system and ensure that you are in administrative access mode. For information about administrative access mode, see Administrative access in the web console in the "Managing systems in the RHEL web console" document.
Alternatively, log into the RHEL web console with an account that has grant permissions for the cluster you want to manage. The account must be a member of the
haclient
group to see the HA Cluster Management web console add-on in limited access mode.- Select a cluster for which you want to manage permissions from the cluster list.
- In the cluster detail, click the Permissions tab on the top of the page and select .
- Add, remove, or edit the permissions for a user or group.
-
By default, any user with an account that is a member of the
haclient
group has read, write and grant permissions. From the Permissions page you can remove this permission if you have administrative access in the web console or if you have grant permissions.