How are you trying to access grafana? Through the Ceph dashboard or by trying to access its URL directly? When mgmt-gatewa is enabled mTLS is enforced and the only allowed access is through the Ceph Dashboard. Note: Can you plz open a tracker and share your Grafana config? This way is easier for devs to help with the issues you are facing. https://tracker.ceph.com/ On Fri, Sep 18, 2026 at 2:47 PM Robert Sander <r.sander@heinlein-support.de> wrote:
Hi,
Am 18.09.26 um 1:58 PM schrieb Redouane Kachach:
I see, I think the problem is the virtual_ip field which has an incorrect value:
virtual_ip: ceph.example.com <http://ceph.example.com/> (INCORRECT)
This field has to be set to the virtual_ip, and that's explains why you end up with this entry in the internal PROMETHEUS_API_HOST.
And then I am on square one again.
Prometheus requires a client certificate for authentication, Grafana does not send one:
# cat etc/prometheus/web.yml tls_server_config: cert_file: prometheus.crt key_file: prometheus.key client_auth_type: RequireAndVerifyClientCert client_ca_file: root_cert.pem
It looks like a client certificate is configured in etc/grafana/provisioning/datasources/ceph-dashboard.yml but the Grafana dashboard does not display any metrics.
A yellow notification box pops up with the text:
<html> <head><title>400 No required SSL certificate was sent</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>No required SSL certificate was sent</center> <hr><center>nginx/1.26.1</center> </body> </html>
Regards -- Robert Sander Linux Consultant
Heinlein Consulting GmbH Schwedter Str. 8/9b, 10119 Berlin
https://www.heinlein-support.de
Tel: +49 30 405051 <+49%2030%20405051> - 0 Fax: +49 30 405051 - 19 <+49%2030%2040505119>
Amtsgericht Berlin-Charlottenburg - HRB 220009 B Geschäftsführer: Peer Heinlein - Sitz: Berlin