Ceph » mgr » Dashboard

The documentation states that it is possible to set a different SSL certificate/key for each manager instance (https://docs.ceph.com/docs/octopus/mgr/dashboard/#ssl-tls-support) using:

$ ceph dashboard set-ssl-certificate $name -i dashboard.crt
$ ceph dashboard set-ssl-certificate-key $name -i dashboard.key

This functionality is not actually implemented. Looking at the code (https://github.com/ceph/ceph/blob/v15.2.4/src/pybind/mgr/dashboard/module.py#L157) the issue is that the dashboard is only reading the module's KV store setting but not the localized store (the one for the "instance").

Replacing `get_store` in lines 157 and 166 (https://github.com/ceph/ceph/blob/v15.2.4/src/pybind/mgr/dashboard/module.py#L157-L166) with `get_localized_store` and restarting the dashboard (`ceph mgr module disable dashboard && ceph mgr module enable dashboard`) pulls the actual instance certificate set as per instructions in the docs.

Ceph cluster version: 15.2.4
Ceph installation method: cephadm