How to add a new security server in the x-road ecosystem about x-road HOT 8 CLOSED

Hi @petkivim
I have the same document as the example, but it still doesn't work for me. I decided to start the project in Docker.
Thank you.

from x-road.

Hi @Fran765

Have you tried to access the UI using HTTPS (https://10.242.215.243:4000)? The UI only supports HTTPS, HTTP is not supported.

Best regards,
Petteri

from x-road.

I've tried both protocols and it still doesn't work.
Is the way I try to add the new security server correct?
The initial configuration of the ansible is done as it says in the git and then I want to add the new security server without losing the initial configuration of the old ones.

or how is the correct way to add a new security server?

from x-road.

The way how you added the new Security Server is correct. However, you could comment out the other hosts in lxd_host.txt so that only the line that contains the new host is active. But even if you reinstall X-Road on the other hosts, you don't lose the initial configuration.

Have you tried to look at the /var/log/xroad/proxy_ui_api.log file for details inside the post-ss3 container?

from x-road.

I tried following that post-ss3 container path and the container is empty, there is only one folder called "snap".

what is this about?
in the other security servers (post-ss1 and post-ss2) if I can enter that path indicates

from x-road.

It means that for some reason the Security Server wasn't installed in the container. You could destroy the container and run the Ansible script again. This time, please comment out the other containers in the hosts file.

from x-road.

Run the commands lxc stop post-ss3 and then lxc delete post-ss3.
Then edit the file where each container is and comment out the other containers as indicated.
I ran the command "ansible-playbook -i hosts/lxd_hosts.txt xroad_init.yml" again and it still doesn't work.

from x-road.

Based on the output, the error is related to the post-cs container. Are you sure you edited the hosts/lxd_hosts.txt file? When other containers are commented out, there shouldn't be errors related to them.

The contents of the file should look something like this:

#central servers (ubuntu lxd containers)
[cs_servers]
#post-cs ansible_connection=lxd

#configuration proxies (ubuntu lxd containers, optional)
[cp_servers]
#xroad-lxd-cp ansible_connection=lxd

#certification authority, time stamping authority and ocsp service server for testing purposes (ubuntu)
[ca_servers]
#post-cs ansible_connection=lxd

#security servers (ubuntu lxd containers)
[ss_servers]
#post-ss1 ansible_connection=lxd
#post-ss2 ansible_connection=lxd
post-ss3 ansible_connection=lxd

[ss_servers:children]
centos_ss

#security servers (centos lxd containers, not supported in variant ee)
[centos_ss]
#xroad-lxd-rh-ss1 ansible_connection=lxd

#container host
[lxd_servers]
localhost ansible_connection=local

#compilation host
[compile_servers]
localhost ansible_connection=local

### vars ###
[ss_servers:vars]
variant=vanilla

from x-road.