Updates the cluster configuration.

 rladmin cluster config 
        [ auditing db_conns audit_protocol { TCP | local } 
           audit_address <audit_address> audit_port <audit_port> ]
        [bigstore_driver {speedb | rocksdb} ]
        [ control_cipher_suites <BoringSSL cipher list> ]
        [ cm_port <number> ]
        [ cm_session_timeout <minutes> ]
        [ cnm_http_port <number> ]
        [ cnm_https_port <number> ]
        [ crdb_coordinator_port <number> ]
        [ data_cipher_list <openSSL cipher list> ]
        [ data_cipher_suites_tls_1_3 <openSSL cipher list> ]
        [ debuginfo_path <filepath> ]
        [ encrypt_pkeys { enabled | disabled } ]
        [ envoy_admin_port <new-port> ]
        [ envoy_mgmt_server_port <new-port> ]
        [ gossip_envoy_admin_port <new-port> ]
        [ handle_redirects { enabled | disabled } ]
        [ handle_metrics_redirects { enabled | disabled } ]
        [ http_support { enabled | disabled } ]
        [ ipv6 { enabled | disabled } ]
        [ min_control_TLS_version { 1.2 | 1.3 } ]
        [ min_data_TLS_version { 1.2 | 1.3 } ]
        [ min_sentinel_TLS_version { 1.2 | 1.3 } ]
        [ reserved_ports <list of ports/port ranges> ]
        [ s3_url <URL> ]
        [ saslauthd_ldap_conf </tmp/ldap.conf> ]
        [ sentinel_tls_mode { allowed | required | disabled } ]
        [ sentinel_cipher_suites <golang cipher list> ]
        [ services { cm_server | crdb_coordinator | crdb_worker | 
                     mdns_server | pdns_server | saslauthd | 
                     stats_archiver } { enabled | disabled } ]
        [ upgrade_mode { enabled | disabled } ]

Parameters

Parameter Type/Value Description
audit_address string TCP/IP address where a listener can capture audit event notifications
audit_port string Port where a listener can capture audit event notifications
audit_protocol tcp
local
Protocol used for audit event notifications
For production systems, only tcp is supported.
control_cipher_suites list of ciphers Cipher suites used for TLS connections to the admin console (specified in the format understood by the BoringSSL library)
(previously named cipher_suites)
cm_port integer UI server listening port
cm_session_timeout integer Timeout in minutes for the CM session
cnm_http_port integer HTTP REST API server listening port
cnm_https_port integer HTTPS REST API server listening port
crdb_coordinator_port integer, (range: 1024-65535) (default: 9081) CRDB coordinator port
data_cipher_list list of ciphers Cipher suites used by the the data plane (specified in the format understood by the OpenSSL library)
data_cipher_suites_tls_1_3 list of ciphers Specifies the enabled TLS 1.3 ciphers for the data plane
debuginfo_path filepath Local directory to place generated support package files
encrypt_pkeys enabled
disabled
Enable or turn off encryption of private keys
envoy_admin_port integer, (range: 1024-65535) Envoy admin port. Changing this port during runtime might result in an empty response because envoy serves as the cluster gateway.
envoy_mgmt_server_port integer, (range: 1024-65535) Envoy management server port
gossip_envoy_admin_port integer, (range: 1024-65535) Gossip envoy admin port
handle_redirects enabled
disabled
Enable or turn off handling DNS redirects when DNS is not configured and running behind a load balancer
handle_metrics_redirects enabled
disabled
Enable or turn off handling cluster redirects internally for Metrics API
http_support enabled
disabled
Enable or turn off using HTTP for REST API connections
ipv6 enabled
disabled
Enable or turn off IPv6 connections to the admin console
min_control_TLS_version 1.2
1.3
The minimum TLS protocol version that is supported for the control path
min_data_TLS_version 1.2
1.3
The minimum TLS protocol version that is supported for the data path
min_sentinel_TLS_version 1.2
1.3
The minimum TLS protocol version that is supported for the discovery service
reserved_ports list of ports/port ranges List of reserved ports and/or port ranges to avoid using for database endpoints (for example reserved_ports 11000 13000-13010)
s3_url string The URL of S3 export and import
saslauthd_ldap_conf filepath Updates LDAP authentication configuration for the cluster
sentinel_cipher_suites list of ciphers Cipher suites used by the discovery service (supported ciphers are implemented by the cipher_suites.go package)
sentinel_tls_mode allowed
required
disabled
Define the SSL policy for the discovery service
(previously named sentinel_ssl_policy)
services cm_server
crdb_coordinator
crdb_worker
mdns_server
pdns_server
saslauthd
stats_archiver

enabled
disabled
Enable or turn off selected cluster services
upgrade_mode enabled
disabled
Enable or turn off upgrade mode on the cluster

Returns

Reports whether the cluster was configured successfully. Displays an error message if the configuration attempt fails.

Example

$ rladmin cluster config cm_session_timeout_minutes 20
Cluster configured successfully