not able to upload disks, iso - Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser.

Hi We are unning with 4.4.3.12-1.el8 version and so far working fine, but today users complained they are unable to upload new disks and upon checking found "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser" during testing option. please help on this and if there is any temp solution is available share me the steps

Hi,
We are unning with 4.4.3.12-1.el8 version and so far working fine, but today users complained they are unable to upload new disks and upon checking found "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser" during testing option. please help on this and if there is any temp solution is available share me the steps
if you want to upload imgaes from browser, you have to import certificates into the *browser*. So follow the link, download the certificate and import it into the browser as a trusted. I.e. this is related to browser configuration, not oVirt configuration. See [1, 2] for more details. Alternatively, you can upload image using upload_disk example script from ovirt-engine-sdk [3], e.g. curl -k "https://$ENGINE_URL/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA" > cert.pem ./upload_disk.py --insecure --engine-url $ENGINE_URL --username admin@internal --password-file $PASSWD_FILE --disk-format raw --sd-name $STORAGE_DOMAIN_NAME -c cert.pem $PATH_TO_IMAGE HTH Vojta [1] Browser configuration section in http://ovirt.github.io/ovirt-imageio/configuration.html [2] https://www.ovirt.org/develop/release-management/features/infra/pki.html [3] https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_di...

I fixed it with below solutions # cp -p /etc/ovirt-imageio/conf.d/50-engine.conf /etc/ovirt-imageio/conf.d/99-local.conf # systemctl restart ovirt-imageio.service

On Tue, Jan 12, 2021 at 11:46 AM dhanaraj.ramesh--- via Users <users@ovirt.org> wrote:
I fixed it with below solutions
# cp -p /etc/ovirt-imageio/conf.d/50-engine.conf /etc/ovirt-imageio/conf.d/99-local.conf
It seems that you have a all-in-one setup, running engine and vdsm on the same host. This setup is not supported since ovirt-4.0 (or earlier), but it used to work on 4.3. This is unlikely to work since engine configuration will not work for vdsm. If ovirt-imageio will run with engine configuration, it will not work with vdsm, and it it run with vdsm configuration it will not work with engine. The way to fix this is to use vdsm configuration for ovirt-imageio, and disable the proxy in engine side, so engine UI works directly with the local imageio daemon. engine-config -s "ImageTransferProxyEnabled=false" systemctl restart ovirt-engine Nir

You are a saint and a scholar! This 100% fixed it for me. (Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser). oVirt version 4.4.5.11-1.el8 and using Firefox 78.9.0esr (64-bit) I tried to import the cert file; that worked just fine. But to no avail! I'm running an 'all-in-one' setup on CentOS 8 Stream, 4.18.0-240.22.1.el8_3.x86_64 I ran into some older posts with workarounds for various bugs, but most were fairly old and I suspected there was a cleaner way to get this working. This is it.
participants (4)
-
dhanaraj.ramesh@yahoo.com
-
Nir Soffer
-
regloff@gmail.com
-
Vojtech Juranek