Project

General

Profile

Actions

Bug #56970

closed

mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns name

Added by Henry Hirsch over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Component - Services & Daemons
Target version:
-
% Done:

50%

Source:
Tags:
backport_processed
Backport:
pacific, quincy
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Description of problem

The Dashboard RGW tab returns http 500 because the dashboard trys to connect via ssl to an ip address instead of the dns name of the rados gateway.

Environment

  • ceph version string: 16.2.9
  • Platform (OS/distro/release): Oracle Linux 8
  • Cluster details (nodes, monitors, OSDs): Not relevant
  • Did it happen on a stable environment or after a migration/upgrade?:
  • Browser used (e.g.: Version 86.0.4240.198 (Official Build) (64-bit)):Not relevant

How reproducible

Steps:
1. have ssl configured on rgw (ssl verify on)
2. click on the ceph dashboard Object Gateway Tab

Exception:

Traceback (most recent call last):
  File "/usr/share/ceph/mgr/dashboard/rest_client.py", line 399, in do_request
    url, headers=request_headers, params=params, auth=self.auth)
  File "/lib/python3.6/site-packages/requests/sessions.py", line 546, in get
    return self.request('GET', url, **kwargs)
  File "/usr/share/ceph/mgr/dashboard/rest_client.py", line 48, in request
    return super(TimeoutRequestsSession, self).request(*args, **kwargs)
  File "/lib/python3.6/site-packages/requests/sessions.py", line 533, in request
    resp = self.send(prep, **send_kwargs)
  File "/lib/python3.6/site-packages/requests/sessions.py", line 646, in send
    r = adapter.send(request, **kwargs)
  File "/lib/python3.6/site-packages/requests/adapters.py", line 514, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='10.88.7.67', port=443): Max retries exceeded with url: /admin/metadata/user?myself (Caused by SSLError(CertificateError("hostname '10.88.7.67' doesn't match either of 's3dev-c01rg
w.lan', '*.s3dev-c01rgw.lan', 's3dev-c01rgw01.lan', '*.s3dev-c01rgw01.lan', 's3dev-c01rgw02.lan', '*.s3dev-c01rgw02.lan', 's3dev-c01rgw03.lan', '*.s3dev-c01rgw03.lan'" 
,),))

Additional info

I already opened a PR: https://github.com/ceph/ceph/pull/47207


Related issues 2 (0 open2 closed)

Copied to Dashboard - Backport #57223: quincy: mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns nameResolvedPere Díaz BouActions
Copied to Dashboard - Backport #57224: pacific: mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns nameResolvedPere Díaz BouActions
Actions #1

Updated by Nizamudeen A over 1 year ago

  • Status changed from New to Fix Under Review
  • Assignee set to Henry Hirsch
Actions #2

Updated by Nizamudeen A over 1 year ago

  • Status changed from Fix Under Review to Pending Backport
  • Backport set to pacific, quincy
Actions #3

Updated by Backport Bot over 1 year ago

  • Copied to Backport #57223: quincy: mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns name added
Actions #4

Updated by Backport Bot over 1 year ago

  • Copied to Backport #57224: pacific: mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns name added
Actions #5

Updated by Backport Bot over 1 year ago

  • Tags set to backport_processed
Actions #6

Updated by Volker Theile over 1 year ago

  • Status changed from Pending Backport to Resolved
Actions

Also available in: Atom PDF