Executed when: Creating a multi-node cluster.

Adds a node to Cryptographic Security Platform.

clusterctl node add <node> <token> [--db-appliance-password <db-appliance-password>]

Specifically, this command:

  • Prints a warning when the cluster does not contain the Required number of nodes
  • Enables firewalld and creates firewall rules for opening the Required open ports.
  • In case of execution error, rolls back all actions and reports the error cause.

As explained in Creating a multi-node cluster:

  • Do not run this command simultaneously in different nodes of the same Cryptographic Security Platform deployment.
  • Redeploy the deployed solutions (if any) to make the changes effective.

See below for a description of each parameter.

<node>

The IP address of a node already in the Cryptographic Security Platform cluster.

In AWS and Azure cloud installations, use the private IP of the node.

Mandatory: Yes.

<token>

The joining token obtained when running the clusterctl node join-token command in the <node>  node.

Mandatory: Yes.

--db-appliance-password <db-appliance-password>

Authenticate in the database appliance as the secroot user and the <db-appliance-password> password. Append a "=" to this command to type the password interactively. For example:

$ sudo clusterctl node add 10.1.141.38 4d22f2665fe0680bd3d6f479f176dc21367f41bca9e83864024dc83da0c7c86c --db-appliance-password =
Enter the database appliance 'secroot' user password.
Password:
Adding a node done ╢▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌▌╟ 100 %
Warning: The cluster only contains 2 nodes. Three nodes are required to achieve HA and an odd number of nodes is recommended

Mandatory: When using an Entrust database appliance.