I'm not sure about the curl versions. Did you notice the response from
"C U" the day before yesterday? He or she commented:
fqdn on the dashboard needs working certificate validation.
"Squid did cert work inline → bad cert raised crypto.Error → caught
and rewrapped as ServerConfigException cleanly. Tentacle does cert
work via a
subprocess; failures can now come from (a) the fork itself, (b)
PyO3 init crashing in the child (the documented subinterpreter
collision), or (c)
genuine cert errors marshalled back as JSON. When (b) happens, the
dashboard module's cert provisioning never completes, the module ends up
half-initialized, and downstream dashboard→RGW calls fail with
SignatureDoesNotMatch because the dashboard is operating without
properly loaded
credentials/sigv4 plumbing."
Zitat von Iztok Gregori via ceph-users <[email protected]>:
On 27/05/26 12:17, Eugen Block via ceph-users wrote:
Hi,
Zitat von Iztok Gregori via ceph-users <[email protected]>:
On 27/05/26 09:36, Eugen Block via ceph-users wrote:
The description in this tracker [0] looks identical, but it is
supposed to be fixed. Do you have rgw_dns_name set?
Yes, at certain point I configured client.rgw rgw_dns_name to the
FQDN belonging to the virtual IP of the ingress service.
does it mean that it works now?
No, still doesn't work. To try I've also remove it and then again
set it, but without luck.
I also tried to call the API endpoint directly with curl using the
dashboard credentials and found that from 'older' versions of curl
(provided for example by Rocky 9) the command gives me the same
error ('SignatureDoesNotMatch'), but when I was using newer one
(8.5.0 on Ubuntu 22.04 and 8.9.1 on Rocky 10) it correctly answer my
query.
Could it be the problem?
BTW, how you 'unset' a configuration variable, you just put a
empty string or you use the rm option?
ceph config set client.rgw rgw_dns_name ''
or
ceph config rm client.rgw rgw_dns_name
?
That's the correct one (config rm).
Thank you! I sometimes get lost in the documentation :-)
Cheers
Iztok
_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
