ClusterControl 1.3.0 offers enhanced key management, security improvements, and operational reporting for managing MySQL/Postgres clusters. Key features include SSL certificate management, automated server configurations, creation of NDB clusters, and detailed backup and availability reports. This version emphasizes secure access through token-based authentication for controlling data access.

1. Confidential
ClusterControl 1.3.0
May 2016
Johan Andersson
CTO, Severalnines
johan@severalnines.com

2. Confidential
Customers
2
Copyright Severalnines AB

3. Confidential
What Problems do we Address?
3
Copyright 2012 Severalnines AB
Manage Scale
MonitorDeploy

4. Confidential
Management - Beyond Monitoring
4
Copyright Severalnines AB

5. Confidential
ClusterControl DSL -
Automation Programs
5
Copyright Severalnines AB

6. Confidential 6
Copyright 2013 Severalnines AB

7. Confidential
What’s new in 1.3.0?
¤ Key Management and Encryption
¤ Additional Operational Reports
¤ Improved Security
¤ Create/Mirror Repository
¤ Create NDB Cluster
7
Copyright 2012 Severalnines AB

8. Confidential
Key Management and Encryption
¤ Create SSL Certificates and
Keys
¤ Create Certificate Authority
certificates
¤ Create self-signed
certificates and keys
¤ Enable/Disable SSL encrypted
client/server connections for
MySQL/Postgres based clusters
¤ Servers are automatically
prepared and configured to
use the certificates and keys
¤ SSL options of clients must
be configured by the
administrator
Copyright 2012 Severalnines AB
8
Encrypted
Query
Encrypted
Resultset

9. Confidential
Operational Reports
¤ Availability Report
¤ Uptime/Downtime of managed clusters
¤ Node / Cluster State changes
¤ Backup Report
¤ Backup status
9
Copyright 2012 Severalnines AB

10. Confidential
Improved Security
¤ Controller RPC API Token which enables token
authentication.
¤ Prevents non-authorized users accessing controller data.
¤ Specified by rpc_key in cmon_X.cnf, e.g:
¤ rpc_key=OkC32YcxgshPk1m1
¤ Custom scripts/applications utilizing the RPC API need
to pass the correct token for the clusters.
¤ See
http://severalnines.com/downloads/cmon/cmon-
docs/current/ccrpc.html#configuration
10
Copyright 2012 Severalnines AB

11. Confidential
Create/Mirror Repository
¤ Mirror your database vendor’s software repository
¤ Mirror what is actually installed.
¤ Lock a deployment to a particular db version
¤ Ensure that “Add Node” installs the same version as already
in use
11
Copyright 2012 Severalnines AB

12. Confidential
Create NDB Cluster
¤ Allows you to create a MySQL Cluster (NDB Cluster)
consisting of:
¤ Management servers
¤ Data Nodes
¤ MySQL Servers
12
Copyright 2012 Severalnines AB

13. Confidential 13
Copyright 2012 Severalnines AB

14. Confidential
Getting Started
¤ Dedicated VM for the controller
¤ Specs
¤ 2 CPU cores
¤ 2-4GB RAM
¤ 20GB diskspace
¤ No agents
¤ Host stats gathered via SSH
¤ Installation
¤ YUM/APT
¤ Setup SSH access to Controller itself and DB nodes
¤ http://repo.severalnines.com/
14
Copyright Severalnines AB

15. Confidential
QA
15
Copyright 2012 Severalnines AB