Hi everyone.

I'm trying to configure a RGW for S3. 

I'm currently running reef 18.2.7

I was able to make the rgw working (= the service is up and listen on the
correct port) without ssl. 

I'm trying to configure the ssl port and I didn't find the correct syntaxe
for that. 

I create a yaml file with something like 

  spec:
  rgw_frontend_port: 8080
  zone_endpoints: https://host1:8080, https://host2:8080,etc.
  ssl: true
  rgw_frontend_ssl_certificate: |
    -----BEGIN RSA PRIVATE KEY-----
    ....
    -----END RSA PRIVATE KEY-----
    -----BEGIN CERTIFICATE-----
    .....
    -----END CERTIFICATE-----

or with the all chain of CA

  spec:
  rgw_frontend_port: 8080
  zone_endpoints: https://host1:8080, https://host2:8080,etc.
  ssl: true
  rgw_frontend_ssl_certificate: |
    -----BEGIN RSA PRIVATE KEY-----
    ....
    -----END RSA PRIVATE KEY-----
    -----BEGIN CERTIFICATE-----
    .....
    -----END CERTIFICATE-----
    -----BEGIN CERTIFICATE-----
    .....
    -----END CERTIFICATE-----
    .....
    -----BEGIN CERTIFICATE-----
    .....
    -----END CERTIFICATE-----

both not working the journalctl say 

  ssl_private_key was not found: rgw/cert/obspm/meudon.key

I find somewhere on the net this syntaxe

  spec:
  rgw_frontend_port: 8080
  zone_endpoints: https://host1:8080, https://host2:8080,etc.
  ssl: true
  ssl_private_key: |
    -----BEGIN RSA PRIVATE KEY-----
    ....
    -----END RSA PRIVATE KEY-----
  ssl_certificate: |
    -----BEGIN CERTIFICATE-----
    .....
    -----END CERTIFICATE-----

and I got 

Error EINVAL: ServiceSpec: __init__() got an unexpected keyword argument 
'ssl_private_key'


Any clue ? 

Regards

-- 
Albert SHIH 🦫 🐸
France
Heure locale/Local time:
ven. 06 juin 2025 10:47:08 CEST
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to