Thanks Gene, It works!! $ cat /etc/kolla/config/haproxy/services.d/ceph-dashboard.cfg frontend ceph_external_front mode http http-request del-header X-Forwarded-Proto option httplog option forwardfor http-request set-header X-Forwarded-Proto https if { ssl_fc } bind XX.XX.XX.XX:8443 ssl crt /etc/haproxy/haproxy.pem default_backend ceph_external_back backend ceph_external_back mode http balance roundrobin server ctrl1 192.168.3.21:8443 ssl verify none frontend ceph_grafana_external_front mode http http-request del-header X-Forwarded-Proto option httplog option forwardfor http-request set-header X-Forwarded-Proto https if { ssl_fc } bind XX.XX.XX.XX:3000 ssl crt /etc/haproxy/haproxy.pem default_backend ceph_grafana_external_back backend ceph_grafana_external_back mode http balance roundrobin server ctrl1 192.168.3.21:3000 ssl verify none On Mon, Feb 6, 2023 at 1:19 PM Gene Kuo <igene@igene.tw> wrote:

Hi,

You can add custom haproxy backend under "/etc/kolla/config/haproxy/services.d" by default. Just add another backend for ceph-dashboard in the folder. As for keepalived, I believe you will be able to override the config and add another VIP in "/etc/kolla/config/keepalived/keepalived.conf".

Hope this help!

Regards, Gene Kuo ------- Original Message ------- On Monday, February 6th, 2023 at 5:08 AM, Satish Patel < satish.txt@gmail.com> wrote:

Folks,

We have multi-node openstack running and recently i have deployed ceph storage which is in an internal network and i would like to access ceph dashboard on public. I was thinking if there is a way to insert custom vip configuration in the Kolla HAProxy role then I can expose the 8443 port of the ceph-dashboard to the public network.

Is it possible in kolla to add custom config in haproxy for extra vip?