Chapter 9. Getting started with the pcsd Web UI

Procedure

1. On any system, open a browser to the following URL, specifying one of the nodes of the cluster (note that this uses the https protocol). This brings up the pcsd Web UI login screen.

   https://nodename:2224

2. Log in as user hacluster. This brings up the Clusters page.

1. Ensure that the pcsd certificates are synced across the nodes of the cluster by setting PCSD_SSL_CERT_SYNC_ENABLED to true in the /etc/sysconfig/pcsd configuration file. Enabling certificate syncing causes pcsd to sync the certificates for the cluster setup and node add commands. PCSD_SSL_CERT_SYNC_ENABLED is set to false by default.
2. Create an IPaddr2 cluster resource, which is a floating IP address that you will use to connect to the pcsd Web UI. The IP address must not be one already associated with a physical node. If the IPaddr2 resource’s NIC device is not specified, the floating IP must reside on the same network as one of the node’s statically assigned IP addresses, otherwise the NIC device to assign the floating IP address cannot be properly detected.

3. Create custom SSL certificates for use with pcsd and ensure that they are valid for the addresses of the nodes used to connect to the pcsd Web UI.

   1. To create custom SSL certificates, you can use either wildcard certificates or you can use the Subject Alternative Name certificate extension. For information about the Red Hat Certificate System, see the Red Hat Certificate System Administration Guide.
   2. Install the custom certificates for pcsd with the pcs pcsd certkey command.
   3. Sync the pcsd certificates to all nodes in the cluster with the pcs pcsd sync-certificates command.
4. Connect to the pcsd Web UI using the floating IP address you configured as a cluster resource.