Project

General

Profile

Actions

Documentation #47637

closed

mgr/cephadm: document how to configure custom TLS certificate for Grafana

Added by Patrick Seidensal over 3 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
cephadm/monitoring
Target version:
-
% Done:

0%

Tags:
Backport:
octopus
Reviewed:
Affected Versions:
Pull request ID:

Description

The documentation is missing the description of the configuration options necessary to set a custom TLS certificate for Grafana.


Related issues 2 (1 open1 closed)

Related to Orchestrator - Documentation #45937: cephadm: setting the various certificatesNew

Actions
Related to Orchestrator - Bug #56508: haproxy check fails for ceph-grafana service ResolvedRedouane Kachach Elhichou

Actions
Actions #1

Updated by Sebastian Wagner over 3 years ago

Actions #2

Updated by Sebastian Wagner almost 3 years ago

  • Assignee deleted (Patrick Seidensal)
Actions #3

Updated by Kai Stian Olstad almost 3 years ago

This is how I did it

Since cephadm shell ceph config-key set mgr/cephadm/grafana_crt -i <cert-file> can't read files from the host, I needed to run cephadm shell, then it will then than have access to /var/lib/ceph/<fsid>/home/ in /root in cephadm shell.

cp <cert-file> <key-file> /var/lib/ceph/*/home/

cephadm shell
ceph config-key set mgr/cephadm/grafana_crt -i /root/<cert-file>
ceph config-key set mgr/cephadm/grafana_key -i /root/<key-file>
ceph orch daemon reconfig $(ceph orch ps | grep grafana | cut -f1 -d" ")
exit

I did not find a way to reference the grafana daemon directly hence the grep and cut command.

Actions #4

Updated by Kai Stian Olstad almost 3 years ago

Reconfigure can be done easier with

ceph orch reconfig grafana

Actions #6

Updated by Redouane Kachach Elhichou almost 2 years ago

  • Related to Bug #56508: haproxy check fails for ceph-grafana service added
Actions

Also available in: Atom PDF