Quincy/Dashboard: Object Gateway not accessible after applying self-signed cert to rgw service
Hi, I am running a Ceph cluster and configured RGW for S3, initially w/o SSL. The service works nicely and I updated the service usinfg SSL certs, signed by our own CA, just as I already did for the dashboard itself. However, as soon as I applied the new config, the dashboard wasn't able to access and display the service anymore, while the service itself still works, now using the supplied SSL certificate. The error supplied is: Error 500 The server encountered an unexpected condition which prevented it from fulfilling the request. My guess is, that the dashboard for some reason doesn't like the certificate, the rgw service is providing, despite the fact, that itself is using it. Any hints on how to make dashboard display the Object Gatway again?
Although I did search the list for prior posting regarding the issue I had, I finally came across a thread which addressed this issue. In short, updating Ceph to 18.2.2 resolved this issue. The first issue was - as I initially suspected, caused by mgr to perform a verification on the SSL certs presented to it. Once I disabled that using ceph dashboard set-rgw-api-ssl-verify false I was presented with another error, which was then resolved by the Ceph upgrade: Mär 25 10:47:25 bceph01 conmon[260644]: ValueError: invalid literal for int() with base 10: '9443 ssl_certificate=config://rgw/cert/rgw.rgw.JVM.GH79'
participants (1)
-
stephan.budach@jvm.com