Updates the cluster configuration.

 rladmin cluster config 
        [ auditing db_conns audit_protocol { TCP | local } 
           audit_address <audit_address> audit_port <audit_port> ]
        [bigstore_driver {speedb | rocksdb} ]
        [ control_cipher_suites <BoringSSL cipher list> ]
        [ cm_port <number> ]
        [ cm_session_timeout <minutes> ]
        [ cnm_http_port <number> ]
        [ cnm_https_port <number> ]
        [ crdb_coordinator_port <number> ]
        [ data_cipher_list <openSSL cipher list> ]
        [ data_cipher_suites_tls_1_3 <openSSL cipher list> ]
        [ debuginfo_path <filepath> ]
        [ encrypt_pkeys { enabled | disabled } ]
        [ envoy_admin_port <new-port> ]
        [ envoy_mgmt_server_port <new-port> ]
        [ gossip_envoy_admin_port <new-port> ]
        [ handle_redirects { enabled | disabled } ]
        [ handle_metrics_redirects { enabled | disabled } ]
        [ http_support { enabled | disabled } ]
        [ ipv6 { enabled | disabled } ]
        [ min_control_TLS_version { 1.2 | 1.3 } ]
        [ min_data_TLS_version { 1.2 | 1.3 } ]
        [ min_sentinel_TLS_version { 1.2 | 1.3 } ]
        [ reserved_ports <list of ports/port ranges> ]
        [ s3_url <URL> ]
        [ saslauthd_ldap_conf </tmp/ldap.conf> ]
        [ sentinel_tls_mode { allowed | required | disabled } ]
        [ sentinel_cipher_suites <golang cipher list> ]
        [ services { cm_server | crdb_coordinator | crdb_worker | 
                     mdns_server | pdns_server | saslauthd | 
                     stats_archiver } { enabled | disabled } ]
        [ upgrade_mode { enabled | disabled } ]

Parameters

ParameterType/ValueDescription
audit_addressstringTCP/IP address where a listener can capture audit event notifications
audit_portstringPort where a listener can capture audit event notifications
audit_protocoltcp
local		Protocol used for audit event notifications
For production systems, only tcp is supported.
control_cipher_suiteslist of ciphersCipher suites used for TLS connections to the admin console (specified in the format understood by the BoringSSL library)
(previously named cipher_suites)
cm_portintegerUI server listening port
cm_session_timeoutintegerTimeout in minutes for the CM session
cnm_http_portintegerHTTP REST API server listening port
cnm_https_portintegerHTTPS REST API server listening port
crdb_coordinator_portinteger, (range: 1024-65535) (default: 9081)CRDB coordinator port
data_cipher_listlist of ciphersCipher suites used by the the data plane (specified in the format understood by the OpenSSL library)
data_cipher_suites_tls_1_3list of ciphersSpecifies the enabled TLS 1.3 ciphers for the data plane
debuginfo_pathfilepathLocal directory to place generated support package files
encrypt_pkeysenabled
disabled		Enable or turn off encryption of private keys
envoy_admin_portinteger, (range: 1024-65535)Envoy admin port. Changing this port during runtime might result in an empty response because envoy serves as the cluster gateway.
envoy_mgmt_server_portinteger, (range: 1024-65535)Envoy management server port
gossip_envoy_admin_portinteger, (range: 1024-65535)Gossip envoy admin port
handle_redirectsenabled
disabled		Enable or turn off handling DNS redirects when DNS is not configured and running behind a load balancer
handle_metrics_redirectsenabled
disabled		Enable or turn off handling cluster redirects internally for Metrics API
http_supportenabled
disabled		Enable or turn off using HTTP for REST API connections
ipv6enabled
disabled		Enable or turn off IPv6 connections to the admin console
min_control_TLS_version1.2
1.3		The minimum TLS protocol version that is supported for the control path
min_data_TLS_version1.2
1.3		The minimum TLS protocol version that is supported for the data path
min_sentinel_TLS_version1.2
1.3		The minimum TLS protocol version that is supported for the discovery service
reserved_portslist of ports/port rangesList of reserved ports and/or port ranges to avoid using for database endpoints (for example reserved_ports 11000 13000-13010)
s3_urlstringThe URL of S3 export and import
saslauthd_ldap_conffilepathUpdates LDAP authentication configuration for the cluster
sentinel_cipher_suiteslist of ciphersCipher suites used by the discovery service (supported ciphers are implemented by the cipher_suites.go package)
sentinel_tls_modeallowed
required
disabled		Define the SSL policy for the discovery service
(previously named sentinel_ssl_policy)
servicescm_server
crdb_coordinator
crdb_worker
mdns_server
pdns_server
saslauthd
stats_archiver

enabled
disabled		Enable or turn off selected cluster services
upgrade_modeenabled
disabled		Enable or turn off upgrade mode on the cluster

Returns

Reports whether the cluster was configured successfully. Displays an error message if the configuration attempt fails.

Example

$ rladmin cluster config cm_session_timeout_minutes 20
Cluster configured successfully