]> git.apps.os.sepia.ceph.com Git - ceph-ansible.git/commit
dashboard: remove "certificate is valid for" error
authorGuillaume Abrioux <gabrioux@redhat.com>
Tue, 6 Jul 2021 12:18:51 +0000 (14:18 +0200)
committerGuillaume Abrioux <gabrioux@redhat.com>
Wed, 7 Jul 2021 15:19:11 +0000 (17:19 +0200)
commit867376c30bdd55c72894246b3ea6aa62c13d22ab
tree02125484d1594c3f1ad4af734b93a634e3e7692e
parentb3dde31a06123bc4907fd7bfb2d13f96da86c908
dashboard: remove "certificate is valid for" error

When deploying dashboard with ssl certificates generated by
ceph-ansible, we enforce the CN to 'ceph-dashboard' which can makes
application such alertmanager complain like following:

`err="Post https://mgr0:8443/api/prometheus_receiver: x509: certificate is valid for ceph-dashboard, not mgr0" context_err="context deadline exceeded"`

The idea here is to add alternative names matching all mgr/mon instances
in the certificate so this error won't appear in logs.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1978869
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
(cherry picked from commit 72a0336c71cee8bd0a375ac47cb45a292844edc8)
group_vars/all.yml.sample
group_vars/rhcs.yml.sample
roles/ceph-dashboard/tasks/configure_dashboard.yml
roles/ceph-dashboard/tasks/configure_dashboard_backends.yml [deleted file]
roles/ceph-defaults/defaults/main.yml