Can't upload ISO or template

[UAnton]

Hello,
I'm trying to deploy a cloud on Cloudstack and xpc-ng. I have 2 interfaces. Network0 and Network1.

Scheme: MGMT - 10.100.1.0/24 (Network0), 10.0.0.0/24 VLAN 1001 (Public), Guest - VXLAN (Network1)
Storage: Primary - 10.100.1.202 (ISCSI), Secondary - 10.100.1.206 (NFS)
Everything was added without problems. Both storages are visible. Service VMs are created and connected. I can't upload ISOs or templates, or create a VM. The VM and router don't start.
Where did I make a mistake? Thanks!

[DaanHoogland]

@UAnton , can you register ISOs and templates from URLs?

Please investigate the logs on the management server and SSVM to see if any exceptions are related to the upload attempt.

[weizhouapache]

@UAnton
if you upload certs, you can refer to https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/

setting use.https.to.upload to false works for me

[UAnton]

@weizhouapache
I read this but any HTTPS links present

I can't find any normal docs about certificates.

[weizhouapache]

you need to

• change global settings
• restart mgmt service
• restart or destroy/recreate system vms

[UAnton]

@weizhouapache
I have done this more than 10 times... but HTTPS is not enabled for console, upload... ACS ignore my cert and SSL settings

[weizhouapache]

@weizhouapache I have done this more than 10 times... but HTTPS is not enabled for console, upload... ACS ignore my cert and SSL settings

what's the value of global settings ?
(refer to https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/)

[UAnton]

@weizhouapache
I have redeployed the certificate and SystemVMs. Enable SSL for GUI.
Now SSL works for console, GUI, and image download but upload doesn't work.
All settings global settings like in (https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/)
Try to enable/disable use.https.to.upload but can't upload ISOs, images, volumes...

Access to XMLHttpRequest at 'https://10-1-0-2.skillvps.local/upload/913750b1-1f6d-4b10-b3ce-45e7c5f638c2' from origin 'https://cloudstack.skillvps.local:8443' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

[weizhouapache]

@weizhouapache I have redeployed the certificate and SystemVMs. Enable SSL for GUI. Now SSL works for console, GUI, and image download but upload doesn't work. All settings global settings like in (https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/) Try to enable/disable use.https.to.upload but can't upload ISOs, images, volumes...

Access to XMLHttpRequest at 'https://10-1-0-2.skillvps.local/upload/913750b1-1f6d-4b10-b3ce-45e7c5f638c2' from origin 'https://cloudstack.skillvps.local:8443' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

it looks related to #9389

can you share the config file /etc/apache2/https.conf or /etc/apache2/http.conf in the secondary storage VM ?
@UAnton

I also wonder if it is related to .local domain

[UAnton]

@weizhouapache

httpd.conf https.conf root@s-114-VM:~# cat /etc/apache2/https.conf RewriteEngine On RewriteCond %{HTTPS} =on RewriteCond %{REQUEST_METHOD} =POST RewriteRule ^/upload/(.*) http://127.0.0.1:8210/upload?uuid=$1 [P,L] Header always set Access-Control-Allow-Origin "*" Header always set Access-Control-Allow-Methods "POST, OPTIONS" Header always set Access-Control-Allow-Headers "x-requested-with, content-type, origin, authorization, accept, client-security-token, x-signature, x-metadata, x-expires"

[UAnton]

@weizhouapache
Update names and lets-encrypt. All works fine! Thanks!

[weizhouapache]

Good.
So, is it true that the issue is caused by the .local domain ?

[UAnton]

Good. So, is it true that the issue is caused by the .local domain ?

Yes. With public domain all ok