Actions
Bug #56970
closedmgr/dashboard: dashboard connects via ssl to an ip address instead of a dns name
Status:
Resolved
Priority:
Normal
Assignee:
Category:
Component - Services & Daemons
Target version:
-
% Done:
50%
Source:
Tags:
backport_processed
Backport:
pacific, quincy
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
Description of problem¶
The Dashboard RGW tab returns http 500 because the dashboard trys to connect via ssl to an ip address instead of the dns name of the rados gateway.
Environment¶
ceph version
string: 16.2.9- Platform (OS/distro/release): Oracle Linux 8
- Cluster details (nodes, monitors, OSDs): Not relevant
- Did it happen on a stable environment or after a migration/upgrade?:
- Browser used (e.g.:
Version 86.0.4240.198 (Official Build) (64-bit)
):Not relevant
How reproducible¶
Steps:
1. have ssl configured on rgw (ssl verify on)
2. click on the ceph dashboard Object Gateway Tab
Exception: Traceback (most recent call last): File "/usr/share/ceph/mgr/dashboard/rest_client.py", line 399, in do_request url, headers=request_headers, params=params, auth=self.auth) File "/lib/python3.6/site-packages/requests/sessions.py", line 546, in get return self.request('GET', url, **kwargs) File "/usr/share/ceph/mgr/dashboard/rest_client.py", line 48, in request return super(TimeoutRequestsSession, self).request(*args, **kwargs) File "/lib/python3.6/site-packages/requests/sessions.py", line 533, in request resp = self.send(prep, **send_kwargs) File "/lib/python3.6/site-packages/requests/sessions.py", line 646, in send r = adapter.send(request, **kwargs) File "/lib/python3.6/site-packages/requests/adapters.py", line 514, in send raise SSLError(e, request=request) requests.exceptions.SSLError: HTTPSConnectionPool(host='10.88.7.67', port=443): Max retries exceeded with url: /admin/metadata/user?myself (Caused by SSLError(CertificateError("hostname '10.88.7.67' doesn't match either of 's3dev-c01rg w.lan', '*.s3dev-c01rgw.lan', 's3dev-c01rgw01.lan', '*.s3dev-c01rgw01.lan', 's3dev-c01rgw02.lan', '*.s3dev-c01rgw02.lan', 's3dev-c01rgw03.lan', '*.s3dev-c01rgw03.lan'" ,),))
Additional info¶
I already opened a PR: https://github.com/ceph/ceph/pull/47207
Updated by Nizamudeen A over 1 year ago
- Status changed from New to Fix Under Review
- Assignee set to Henry Hirsch
Updated by Nizamudeen A over 1 year ago
- Status changed from Fix Under Review to Pending Backport
- Backport set to pacific, quincy
Updated by Backport Bot over 1 year ago
- Copied to Backport #57223: quincy: mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns name added
Updated by Backport Bot over 1 year ago
- Copied to Backport #57224: pacific: mgr/dashboard: dashboard connects via ssl to an ip address instead of a dns name added
Updated by Volker Theile over 1 year ago
- Status changed from Pending Backport to Resolved
Actions