Bug 2149536

Summary: [Ceph-Dashboard] Allow CORS if the origin ip is known
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: Nizamudeen <nia>
Component: Ceph-DashboardAssignee: Nizamudeen <nia>
Status: CLOSED ERRATA QA Contact: Sayalee <saraut>
Severity: medium Docs Contact: Eliska <ekristov>
Priority: unspecified    
Version: 6.0CC: akraj, athakkar, ceph-eng-bugs, cephqe-warriors, ekristov, kdreyer, rmandyam, vereddy
Target Milestone: ---   
Target Release: 6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ceph-17.2.5-38.el9cp Doc Type: Enhancement
Doc Text:
.Cross origin resource sharing is now allowed Previously, IBM developers were facing issues with their storage insights product when they tried to ping the REST API using their front-end because of the tight cross origin resource sharing (CORS) policies setup in the REST API. With this release, the `cross_origin_url` option is added, which can be set to a particular URL. The REST API now allows communicating with only that URL. .Example ---- [ceph: root@host01 /]# ceph config set mgr mgr/dashboard/cross_origin_url http://localhost:4200 ----
Story Points: ---
Clone Of:
: 2149653 (view as bug list) Environment:
Last Closed: 2023-03-20 18:59:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2126050    

Comment 1 Ken Dreyer (Red Hat) 2022-12-16 03:15:09 UTC
We're at the RC deadline, so we'll have to fix this in a subsequent release after 6.0.

Comment 16 Veera Raghava Reddy 2023-01-12 08:54:39 UTC
Hi Nizam, Avan,
Need to include PR https://github.com/ceph/ceph/pull/49329 [mgr/dashboard: allow Origin URL for CORS if present in config]
On 5.3 also needs to be ported. IBM team tried to test Storage Insights on 5.3 GA and got errors to access Dashboard using Rest API.
Marking this as Blocker

Comment 18 Veera Raghava Reddy 2023-01-12 09:24:17 UTC
Hi Nizam,
Thanks for the update and for taking care of backport to 6.0

Comment 21 errata-xmlrpc 2023-03-20 18:59:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat Ceph Storage 6.0 Bug Fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:1360