Skip to content

Commit

Permalink
Update Ceph-Dashboard docs
Browse files Browse the repository at this point in the history
Signed-off-by: Utkarsh Bhatt <utkarsh.bhatt@canonical.com>
  • Loading branch information
UtkarshBhatthere committed Aug 25, 2023
1 parent becddc7 commit 53b5b66
Showing 1 changed file with 22 additions and 18 deletions.
40 changes: 22 additions & 18 deletions docs/tutorial/enable_dashboard.rst
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,20 @@ It can also generate a self signed certificate to quickly configure TLS.
ceph dashboard create-self-signed-cert
Configure SSL Key/Certificate pair
--------------------------------

Users may wish to configure their own set of SSL certificates for ceph-dashboard. This can be done simply using the ceph cli command:

.. code-block:: none
ceph dashboard set-ssl-certificate -i server.pem
SSL certificate updated
ceph dashboard set-ssl-certificate-key -i server.key
SSL certificate key updated
**Warning:** MicroCeph snap is a confined ceph application, therefore it does not have access to files at arbitrary locations on the host machine. Therefore, it is required to have the SSL certificate/key files at $HOMEDIR, since MicroCeph can read files located at the home directory.

For more details on SSL/TLS config visit `Ceph-Dashboard configuration <https://docs.ceph.com/en/quincy/mgr/dashboard/#configuration>`_.

Enabled ceph-mgr services can be queried as:
Expand All @@ -33,30 +47,20 @@ Enabled ceph-mgr services can be queried as:
"prometheus": "http://10.5.3.199:9283/"
}
Let's visit the service URL and see our dashboard.

.. figure:: assets/dashboard.jpeg
Creating Admin user
-------------------

Ceph Dashboard WebUI
.. code-block:: none
Configure SSL Key/Certificate pair
----------------------------------
ceph dashboard ac-user-create <username> -i <file-containing-password> administrator
Users may wish to configure their own set of SSL certificates for ceph-dashboard. This can be done simply using the ceph cli command:
**Warning:** Since MicroCeph can only acces external files located at $HOMEDIR, <file-containing-password> should also be located at the home directory.

.. code-block:: none
Let's visit the service URL and see our dashboard.

ceph dashboard set-ssl-certificate -i server.pem
SSL certificate updated
ceph dashboard set-ssl-certificate-key -i server.key
SSL certificate key updated
ceph mgr services
{
"dashboard": "https://10.5.1.107:8443/"
"prometheus": "http://10.5.1.107:9283/"
}
.. figure:: assets/dashboard.jpeg

**Warning:** MicroCeph snap is a confined ceph application, therefore it does not have access to files at arbitrary locations on the host machine. Therefore, it is required to have the SSL certificate/key files at $HOMEDIR, since MicroCeph can read files located at the home directory.
Ceph Dashboard WebUI

Integration with Prometheus and Alertmanager
--------------------------------------------
Expand Down

0 comments on commit 53b5b66

Please sign in to comment.