# Docker Compose: no ziti edge list service-edge-router-policies configured

**URL:** <https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017>\
**Category:** Ziti Overlay\
**Created:** [January 30, 2023, 11:19am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017 "2023-01-30T11:19:37Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [January 30, 2023, 11:19am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/1 "2023-01-30T11:19:37Z")

</div>

Not sure if this is expected, but when I setup a fresh Docker environment, there are no service edge router policies defined.

This is preventing the terminator from being hosted. I know I have some commands somewhere…

```auto
ziti edge list service-edge-router-policies

╭────┬──────┬───────────────┬───────────────────╮

│ ID │ NAME │ SERVICE ROLES │ EDGE ROUTER ROLES │

├────┼──────┼───────────────┼───────────────────┤

╰────┴──────┴───────────────┴───────────────────╯

```

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [January 30, 2023, 11:20am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/2 "2023-01-30T11:20:42Z")

</div>

The init container runs a small script that adds them.

---

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [January 30, 2023, 11:22am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/3 "2023-01-30T11:22:16Z")

</div>

Ahh.. I disabled that one.. I now know why it's needed 🙂

I have a micro compute and need to be mindful of the resources I use.. so I disabled it to keep it really lean.

PS.. I found this command which should fix my problem.

ziti edge create service-edge-router-policy all-routers --edge-router-roles "#all" --service-roles "#all"

> [@allSvcPublicRouters service](https://openziti.discourse.group/t/allsvcpublicrouters-service/363):
>
> When I completed a QuickInstall… and started the controller and router… this service appears to be available by default. ziti edge list service-edge-router-policies Any tips on how I can find out more about this specific service

---

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [January 30, 2023, 11:23am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/4 "2023-01-30T11:23:14Z")

</div>

Bingo

```auto
ziti edge list terminators
╭──────────────────────────────────────┬──────────────────┬──────────────────┬─────────┬──────────────────────────────────────┬──────────┬──────┬────────────┬──────────────╮
│ ID │ SERVICE │ ROUTER │ BINDING │ ADDRESS │ IDENTITY │ COST │ PRECEDENCE │ DYNAMIC COST │
├──────────────────────────────────────┼──────────────────┼──────────────────┼─────────┼──────────────────────────────────────┼──────────┼──────┼────────────┼──────────────┤
│ d5c0df87-98f7-438e-b3de-8bede254263c │ private-postgres │ ziti-edge-router │ tunnel │ d5c0df87-98f7-438e-b3de-8bede254263c │ │ 0 │ default │ 0 │

```

---

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [January 30, 2023, 11:23am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/5 "2023-01-30T11:23:40Z")

</div>

> [@TheLumberjack](#):
>
> The init container runs a small script that adds them

Is there anything else this script does that I should be mindful of?

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [January 30, 2023, 11:28am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/6 "2023-01-30T11:28:54Z")

</div>

> [@markamind](#):
>
> Is there anything else this script does that I should be mindful of?

The 'init container' script? At this time, no. It's tiny. You can look at what it does here: [https://github.com/openziti/ziti/blob/release-next/quickstart/docker/image/access-control.sh](https://github.com/openziti/ziti/blob/release-next/quickstart/docker/image/access-control.sh)

```auto
#!/bin/bash

echo " *****************************************************"
#### Add service policies

# Allow all identities to use any edge router with the "public" attribute
ziti edge create edge-router-policy all-endpoints-public-routers --edge-router-roles "#public" --identity-roles "#all"

# Allow all edge-routers to access all services
ziti edge create service-edge-router-policy all-routers-all-services --edge-router-roles "#all" --service-roles "#all"

```

---

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [January 30, 2023, 11:41am UTC](https://openziti.discourse.group/t/docker-compose-no-ziti-edge-list-service-edge-router-policies-configured/1017/7 "2023-01-30T11:41:15Z")

</div>

> [@TheLumberjack](#):
>
> The ‘init container’ script? At this time, no. It’s tiny. You can look at what it does here: [ziti/access-control.sh at release-next · openziti/ziti · GitHub](https://github.com/openziti/ziti/blob/release-next/quickstart/docker/image/access-control.sh)

Thanks.. very helpful
