Re: cephadm discovery service certificate absent after upgrade.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Is the cephadm http server service starting correctly (in the mgr logs)?

IPv6 ?
________________________________________________________

Cordialement,

*David CASIER*
________________________________________________________




Le mar. 23 janv. 2024 à 16:29, Nicolas FOURNIL <nicolas.fournil@xxxxxxxxx>
a écrit :

> Hello,
>
> Thanks for advice but Prometheus cert is ok, (Self signed) and tested with
> curl and web navigator.
>
>  it seems to be the "Service discovery" certificate from cephadm who is
> missing but I cannot figure out how to set it.
>
> There's in the code a function to create this certificate inside the Key
> store but how ... that's the point :-(
>
> Regards.
>
>
>
> Le mar. 23 janv. 2024 à 15:52, David C. <david.casier@xxxxxxxx> a écrit :
>
>> Hello Nicolas,
>>
>> I don't know if it's an update issue.
>>
>> If this is not a problem for you, you can consider redeploying
>> grafana/prometheus.
>>
>> It is also possible to inject your own certificates :
>>
>> https://docs.ceph.com/en/latest/cephadm/services/monitoring/#example
>>
>>
>> https://github.com/ceph/ceph/blob/main/src/pybind/mgr/cephadm/templates/services/prometheus/prometheus.yml.j2
>>
>> ________________________________________________________
>>
>> Cordialement,
>>
>> *David CASIER*
>> ________________________________________________________
>>
>>
>>
>> Le mar. 23 janv. 2024 à 10:56, Nicolas FOURNIL <nicolas.fournil@xxxxxxxxx>
>> a écrit :
>>
>>>  Hello,
>>>
>>> I've just fresh upgrade from Quincy to Reef and my graphs are now
>>> blank...
>>> after investigations, it seems that discovery service is not working
>>> because of no certificate :
>>>
>>> # ceph orch sd dump cert
>>> Error EINVAL: No certificate found for service discovery
>>>
>>> Maybe an upgrade issue ?
>>>
>>> Is there a way to generate or replace the certificate properly ?
>>>
>>> Regards
>>>
>>> Nicolas F.
>>> _______________________________________________
>>> ceph-users mailing list -- ceph-users@xxxxxxx
>>> To unsubscribe send an email to ceph-users-leave@xxxxxxx
>>>
>>
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx




[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux