I'm not sure about the curl versions. Did you notice the response from "C U" the day before yesterday? He or she commented:

fqdn on the dashboard needs working certificate validation.

"Squid did cert work inline → bad cert raised crypto.Error → caught and rewrapped as ServerConfigException cleanly. Tentacle does cert work via a subprocess; failures can now come from (a) the fork itself, (b) PyO3 init crashing in the child (the documented subinterpreter

collision), or (c) genuine cert errors marshalled back as JSON. When (b) happens, the dashboard module's cert provisioning never completes, the module ends up half-initialized, and downstream dashboard→RGW calls fail with SignatureDoesNotMatch because the dashboard is operating without properly loaded credentials/sigv4 plumbing."

Zitat von Iztok Gregori via ceph-users <ceph-users@ceph.io>:

On 27/05/26 12:17, Eugen Block via ceph-users wrote:

...

Hi,

Zitat von Iztok Gregori via ceph-users <ceph-users@ceph.io>:

...

On 27/05/26 09:36, Eugen Block via ceph-users wrote:

...

The description in this tracker [0] looks identical, but it is supposed to be fixed. Do you have rgw_dns_name set?

Yes, at certain point I configured client.rgw rgw_dns_name to the FQDN belonging to the virtual IP of the ingress service.

does it mean that it works now?

No, still doesn't work. To try I've also remove it and then again set it, but without luck.

I also tried to call the API endpoint directly with curl using the dashboard credentials and found that from 'older' versions of curl (provided for example by Rocky 9) the command gives me the same error ('SignatureDoesNotMatch'), but when I was using newer one (8.5.0 on Ubuntu 22.04 and 8.9.1 on Rocky 10) it correctly answer my query.

Could it be the problem?

...

...

BTW, how you 'unset' a configuration variable, you just put a empty string or you use the rm option?

ceph config set client.rgw rgw_dns_name '' or ceph config rm client.rgw rgw_dns_name ?

That's the correct one (config rm).

Thank you! I sometimes get lost in the documentation :-)

Cheers Iztok _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io