Hello, I believe you are hitting https://tracker.ceph.com/issues/50249. I've also ended up configuring my rgw instances directly using /etc/ceph/ceph.conf for the time being. Hope this helps. Arnaud On Fri, 14 May 2021 at 22:04, Jan Kasprzak <kas@fi.muni.cz> wrote:
Hello,
I have just upgraded my cluster from 14.2.16 to 14.2.21, and after the upgrade, radosgw was listening on the default port 7480 instead of the SSL port it used before the upgrade. It might be I mishandled "ceph config assimilate-conf" previously or forgot to restart radosgw after the assimilate-conf or something. What is the correct way to store radosgw configuration in ceph config?
I have the following (which I think worked previously, but I might be wrong, e.g. forgot to restart radosgw or something):
# ceph config dump [...] client.rgw.<myhost> basic rgw_frontends beast ssl_port=<myport> ssl_certificate=/etc/pki/tls/certs/<myhost>.crt+bundle ssl_private_key=/etc/pki/tls/private/<myhost>.key *
However, after rgw startup, there was the following in /var/log/ceph/ceph-client.rgw.<myhost>.log:
2021-05-14 21:38:35.075 7f6ffd621900 1 mgrc service_daemon_register rgw.<myhost> metadata {arch=x86_64,ceph_release=nautilus,ceph_version=ceph version 14.2.21 (5ef401921d7a88aea18ec7558f7f9374ebd8f5a6) nautilus (stable),ceph_version_short=14.2.21,cpu=AMD ...,distro=centos,distro_description=CentOS Linux 7 (Core),distro_version=7,frontend_config#0=beast port=7480,frontend_type#0=beast,hostname=<myhost>,kernel_description=#1 SMP ...,kernel_version=...,mem_swap_kb=...,mem_total_kb=...,num_handles=1,os=Linux,pid=20451,zone_id=...,zone_name=default,zonegroup_id=...,zonegroup_name=default}
(note the port=7480 and no SSL).
After adding the following into /etc/ceph/ceph.conf on the host where rgw is running, it started to use the correct SSL port again:
[client.rgw.<myhost>] rgw_frontends = beast ssl_port=<myport> ssl_certificate=/etc/pki/tls/certs/<myhost>.crt+bundle ssl_private_key=/etc/pki/tls/private/<myhost>.key
How can I configure this using "ceph config"? Thanks,
-Yenya
-- | Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work | yenya.net - private}> | | http://www.fi.muni.cz/~kas/ GPG: 4096R/A45477D5 | We all agree on the necessity of compromise. We just can't agree on when it's necessary to compromise. --Larry Wall _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
-- Arnaud Lefebvre Clever Cloud