Admin To Worker Communication

Create an application group for the applications specific to enabling communication between the admin and worker nodes.

• Name: Admin Application Group

Create an application in the Admin Application Group with the domain(s) of your worker nodes (e.g worker1.internal.com). We use default in place of the domain to signify that this application should not be restricted to a particular domain.

• Type: Default

• Name: Admin To Worker Application

• Domain: default

Create an IdP Options group for the auth options specific to enabling communication between the admin and worker nodes.

• Name: Admin Options Group

Create an options object (Admin Options), specifying the discovery endpoint and client id for the application integration in your identity provider used to enable auth for the admin dashboard. 

• Name: Admin Options

• Discovery: {your well known config url}

• Client ID: {your admin client id}

• Client Secret: {value will be ignored}

Configure SSL for communication from the admin to the worker nodes. 

1. Upload the cert file and any required CA certs under Certificate Management.

2. Type the name of the cert file for your worker in the SSL configuration

3. Type the name of the key file for your worker in the SSL configuration

Create the directory on each worker node and inject the key file from your vault:  /usr/local/openresty/nginx/conf/ssl/certs 

Create the custom policy (/omg-worker/status) to enable a protected status endpoint on each worker for the admin to call to get the status of each downstream server.

• Type: Status

• Policy Path: /omg-worker/status

• IdP Options Name: Admin Options

Create the custom policy (/omg-worker/validate-config) to enable a protected validate config endpoint on each worker for the admin to call to validate the configuration on each worker.

• Type: Validate Config

• Policy Path: /omg-worker/validate-config

• IdP Options Name: Admin Options

Configure the server status dashboard to leverage the integration you just created between the admin and the workers.

• Server Urls: {server urls for each worker - 1 per line}

• Status Endpoint Path: /omg-worker/status

• Validate Config Path: /omg-worker/validate-config