Hi Robert, When mgmt-gateway is deployed, direct external access to Grafana/Prometheus is intentionally disabled. The monitoring services are expected to be accessed/routed through mgmt-gateway. That's the whole point behind the mgmt-gateway design. Client certs are required bcz when the mgmt-gateway is deployed strict mTLS is enforced for service-to-service communication. Regards, Redo. On Mon, Sep 14, 2026 at 5:22 PM Robert Sander <ceph-users@ceph.io> wrote:
Hi,
we stumbled across an issue that is introduced with the new mgmt-gateway service. As soon as it is active the Prometheus service is configured to require client certificates for its API.
It looks like the Grafana service is configured with client certificates according to the new service spec but it does not seem to use them.
The result is no metrics in the Grafana dashboards.
Can anyone confirm this behaviour?
After removing the mgmt-gateway service and redeploying all monitoring services everything works again.
Regards -- Robert Sander Linux Consultant
Heinlein Consulting GmbH Schwedter Str. 8/9b, 10119 Berlin <https://www.google.com/maps/search/Schwedter+Str.+8%2F9b,+10119+Berlin?entry=gmail&source=g>
https://www.heinlein-support.de
Tel: +49 30 405051 <+49%2030%20405051> - 0 Fax: +49 30 405051 - 19 <+49%2030%2040505119>
Amtsgericht Berlin-Charlottenburg - HRB 220009 B Geschäftsführer: Peer Heinlein - Sitz: Berlin
_______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io