Did you fail the mgr after removing the keys? Or at least disable and enable the dashboard? I just tested this again on a two-node (virtual lab) Quincy cluster, removed the global crt/key and injected per mgr cert and keys, and it works:

    "mgr/dashboard/quincy-1.pcasdd/crt",
    "mgr/dashboard/quincy-1.pcasdd/key",
    "mgr/dashboard/quincy-2.mwrlmj/crt",
    "mgr/dashboard/quincy-2.mwrlmj/key",

quincy-1:~ # ceph mgr services
{
    "dashboard": "https://172.17.2.252:8443/";,
    "prometheus": "http://172.17.2.252:9283/";
}

And I have access to the dashboard.

Zitat von lejeczek <[email protected]>:

If I do:
-> $ ceph config-key rm mgr/dashboard/key
-> $ ceph config-key rm mgr/dashboard/crt
having per-mgr certs,
then there is no communication to mgrs' https at all.
and
-> $ ceph health detail
HEALTH_OK
_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]


_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to