Enable the graphical interface on a satellite node

By default, the graphical user interface (GUI) is disabled on satellite nodes: only the agent-only API and the third-party services are exposed.

This default behavior applies starting with orchestrator base version 5.31, Helm chart version 0.6.8 and Podman orchestrator version 1.3. Satellites configured with an earlier version are not affected until their configuration is regenerated.

If the GUI is nevertheless required on a satellite (local administrative access, troubleshooting, etc.), the procedure below enables it.

Docker Swarm and Podman

1. Edit the file /etc/cyberwatch/containers.env and set the variable to false:

   ONLY_API_AND_THIRD_PARTIES="false"
   

2. Restart Cyberwatch:

   sudo cyberwatch restart
   

Running sudo cyberwatch configure --satellite regenerates the file containers.env and resets ONLY_API_AND_THIRD_PARTIES to its default value (true). The change must be reapplied after each reconfiguration.

Helm chart

Explicitly set nginx.limitToApi: false in the values.yml file, then update the deployment:

nginx:
  limitToApi: false