Description of problem: Following bug #1116851 , the engine expects in its configuration files a new setting ENGINE_REPORTS_BASE_URL, and other related settings, instead of a row in vdc_options. The engine now also expects the certificate of reports to be in its truststore. engine-setup, if running engine and reports on same host, should create such a file and update the truststore, and if not, ask the user to do that.
workaound: do this manually after setup. E.g.: Create a file /etc/ovirt-engine/engine.conf.d/10-my-reports.conf with this content: ENGINE_REPORTS_BASE_URL=https://REPORTS_FQDN/ovirt-engine-reports ENGINE_REPORTS_DASHBOARD_URL=${ENGINE_REPORTS_BASE_URL}/flow.html?viewAsDashboardFrame=true ENGINE_REPORTS_PROXY_URL=${ENGINE_REPORTS_BASE_URL}/ovirt/reports-interface ENGINE_REPORTS_VERIFY_HOST=true ENGINE_REPORTS_VERIFY_CHAIN=true ENGINE_REPORTS_READ_TIMEOUT= replace above REPORTS_FQDN with the fqdn of the reports server (same as engine if on same server). Imported reports cert to truststore with the following command: keytool -importcert -alias reportscacert -file /etc/pki/ovirt-engine/certs/reports.cer -keystore /etc/pki/ovirt-engine/.truststore -storepass mypass If on remote host, replace above '/etc/pki/ovirt-engine/certs/reports.cer' with a file name containing the reports cert. service ovirt-engine restart
(In reply to Yedidyah Bar David from comment #1) > workaound: do this manually after setup. E.g.: > > Create a file /etc/ovirt-engine/engine.conf.d/10-my-reports.conf with this > content: > > ENGINE_REPORTS_BASE_URL=https://REPORTS_FQDN/ovirt-engine-reports > ENGINE_REPORTS_DASHBOARD_URL=${ENGINE_REPORTS_BASE_URL}/flow. > html?viewAsDashboardFrame=true Sorry, this should be: ENGINE_REPORTS_DASHBOARD_URL=${ENGINE_REPORTS_BASE_URL}/flow.html?viewReportFlow=true > ENGINE_REPORTS_PROXY_URL=${ENGINE_REPORTS_BASE_URL}/ovirt/reports-interface > ENGINE_REPORTS_VERIFY_HOST=true > ENGINE_REPORTS_VERIFY_CHAIN=true > ENGINE_REPORTS_READ_TIMEOUT= > > replace above REPORTS_FQDN with the fqdn of the reports server (same as > engine if on same server). > > Imported reports cert to truststore with the following command: > > keytool -importcert -alias reportscacert -file > /etc/pki/ovirt-engine/certs/reports.cer -keystore > /etc/pki/ovirt-engine/.truststore -storepass mypass > > If on remote host, replace above '/etc/pki/ovirt-engine/certs/reports.cer' > with a file name containing the reports cert. > > service ovirt-engine restart
Barak, Arthur, This means that 3.5 will require the workaround in order to setup reports in local and remote installations. Do you approve?
This should definitely make it to 3.5.1, From my point of view this is a must.
Current http://gerrit.ovirt.org/32989 is on engine side, works only if both are on same host. Another patch will be required on reports side when it's remote.
*** Bug 1142750 has been marked as a duplicate of this bug. ***
Not blocking 3.5.0 GA since it has been targeted for 3.5.1 only
Eventually solved both this one and bug 1144079 with a single patch, leaving open for qe verification.
*** Bug 1147435 has been marked as a duplicate of this bug. ***
oVirt 3.5 has been released and should include the fix for this issue.