From 7c184f9d145e89616ccb41a3589e166757438827 Mon Sep 17 00:00:00 2001 From: Scooby Husky Date: Sat, 14 Mar 2026 13:41:57 -0500 Subject: [PATCH] Fix Ceph dashboard DestinationRule: disable TLS to match dashboard config Dashboard has ssl: false (plain HTTP on port 7000), but the DestinationRule had tls.mode: SIMPLE which caused Istio to attempt TLS to the backend, resulting in WRONG_VERSION_NUMBER errors. Co-Authored-By: Claude Opus 4.6 --- infrastructure/rook-ceph/manifests/istio-destinationrule.yaml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml b/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml index 5a233be..6f8546c 100644 --- a/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml +++ b/infrastructure/rook-ceph/manifests/istio-destinationrule.yaml @@ -7,6 +7,4 @@ spec: host: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local trafficPolicy: tls: - mode: SIMPLE - sni: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local - insecureSkipVerify: true + mode: DISABLE