Hello,

I have just upgraded my cluster from 14.2.16 to 14.2.21, and after the
upgrade, radosgw was listening on the default port 7480 instead of the SSL port
it used before the upgrade. It might be I mishandled
"ceph config assimilate-conf" previously or forgot to restart radosgw
after the assimilate-conf or something. What is the correct
way to store radosgw configuration in ceph config?

I have the following (which I think worked previously, but I might be wrong,
e.g. forgot to restart radosgw or something):

# ceph config dump
[...]
    client.rgw.<myhost>   basic    rgw_frontends     beast ssl_port=<myport> 
ssl_certificate=/etc/pki/tls/certs/<myhost>.crt+bundle 
ssl_private_key=/etc/pki/tls/private/<myhost>.key *  

However, after rgw startup, there was the following in
/var/log/ceph/ceph-client.rgw.<myhost>.log:

2021-05-14 21:38:35.075 7f6ffd621900  1 mgrc service_daemon_register 
rgw.<myhost> metadata {arch=x86_64,ceph_release=nautilus,ceph_version=ceph 
version 14.2.21 (5ef401921d7a88aea18ec7558f7f9374ebd8f5a6) nautilus 
(stable),ceph_version_short=14.2.21,cpu=AMD 
...,distro=centos,distro_description=CentOS Linux 7 
(Core),distro_version=7,frontend_config#0=beast 
port=7480,frontend_type#0=beast,hostname=<myhost>,kernel_description=#1 SMP 
...,kernel_version=...,mem_swap_kb=...,mem_total_kb=...,num_handles=1,os=Linux,pid=20451,zone_id=...,zone_name=default,zonegroup_id=...,zonegroup_name=default}
 

(note the port=7480 and no SSL).

After adding the following into /etc/ceph/ceph.conf on the host where
rgw is running, it started to use the correct SSL port again:

[client.rgw.<myhost>]
        rgw_frontends = beast ssl_port=<myport> 
ssl_certificate=/etc/pki/tls/certs/<myhost>.crt+bundle 
ssl_private_key=/etc/pki/tls/private/<myhost>.key

How can I configure this using "ceph config"?
Thanks,

-Yenya

-- 
| Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work | yenya.net - private}> |
| http://www.fi.muni.cz/~kas/                         GPG: 4096R/A45477D5 |
    We all agree on the necessity of compromise. We just can't agree on
    when it's necessary to compromise.                     --Larry Wall
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to