Supporting multiple New Edge UI instances

You can install multiple instances of the New Edge UI (edge-management-ui) in a high availability (HA) scenario. However, after installing multiple instances of the New Edge UI, you must perform post-installation tasks to synchronize the property settings across all edge-management-ui nodes.

Specifically, you must configure all New Edge UI instances to have the same values for the following properties:

conf_uebe_applicationsecret=value
conf_uebe_mgmtCredential=value
conf_apigee_mail.smtp.credential=value

Where:

  • conf_uebe_applicationsecret is the session and credential encryption key used by the New Edge UI.
  • conf_uebe_mgmtCredential is the encrypted Management Server credential.
  • conf_apigee_mail.smtp.credential is the encrypted SMTP server credential.

Additionally, if you configure the New Edge UI instances to use TLS, you must ensure that you use the same TLS certificate and private key on every edge-management-ui node.

Configure New Edge UI instances using HTTP

  1. Log in to the node hosting the first New Edge UI instance (as a shell user on the node).
  2. Open /opt/apigee/token/application/management-ui.properties on the first New Edge UI node and copy the values of the following properties for later use:
    conf_uebe_applicationsecret="value"
    conf_uebe_mgmtCredential="value"
    conf_apigee_mail.smtp.credential="value"
  3. Log in to the node hosting the second New Edge UI instance.
  4. Open /opt/apigee/customer/application/management-ui.properties on the second New Edge UI instance in an editor. If the file does not exist, create it:
    vi /opt/apigee/customer/application/management-ui.properties
  5. Add the following properties to /opt/apigee/customer/application/management-ui.properties using the exact values that you copied from the first New Edge UI instance:
    conf_uebe_applicationsecret="value"
    conf_uebe_mgmtCredential="value"
    conf_apigee_mail.smtp.credential="value"
  6. Save the file.
  7. Make sure /opt/apigee/customer/application/management-ui.properties is owned by the apigee user:
    chown apigee:apigee /opt/apigee/customer/application/management-ui.properties
  8. Configure and restart the second New Edge UI instance:
    /opt/apigee/apigee-service/bin/apigee-service edge-management-ui configure
    /opt/apigee/apigee-service/bin/apigee-service edge-management-ui restart

Users can now log in to either New Edge UI instance.

Configure New Edge UI instances using TLS/HTTPS

  1. Configure the first New Edge UI instance to use TLS/HTTPS as described in Configure TLS for the New Edge UI.
  2. Configure the second New Edge UI instance as described above for HTTP to synchronize conf_uebe_applicationsecret, conf_uebe_mgmtCredential, and conf_apigee_mail.smtp.credential.
  3. Copy the PEM files containing the TLS certificate and private key from the first New Edge UI instance to the node hosting the second New Edge UI instance (for example, in /opt/apigee/customer/application/edge-management-ui/).
  4. Configure the second New Edge UI instance to use TLS/HTTPS as described in Configure TLS for the New Edge UI.