Gadgets failing (_MSG_.gh.gadget ) after Jira migration

rahul_bhardwaj July 26, 2016

We migrated from an old JIRA box to a new JIRA server with following changes:

 

  • from 6.4 to 7.1
  • JIRA - Haproxy setup
  • SSL termination on Haproxy
  • New Base url for JIRA (new Production domain)

 

After migration of data from old JIRA server to new Jia server the Gadgets are failing to display for all Dashboards  (_MSG_.gh.gadget **)

 

I am referring this link but couldn't reach to any solution yet https://confluence.atlassian.com/jirakb/how-to-fix-gadget-titles-showing-as-__msg_gadget-813697086.html 

 

Thanks

Rahul

1 answer

1 vote
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
July 26, 2016

There is something on the Haproxy preventing JIRA from talking to itself.  (In my case, I didn't have client certificates installed on JIRA so when it went out over the proxy and came back in, it couldn't reach itself)

Have you worked through every scenario on the document you mention?  Could you check the log file for errors?

rahul_bhardwaj July 26, 2016
Little more detail of the setup:
 
Multiple Tool services using haproxy. JIRA is one of them. 
Valid certificate signed by Geotrust on Haproxy configured using SNI for each services.
JIRA links:
JIRA external url (via haproxy) :https://jira.devops.boots.co.uk
JIRA internal url : https://jrap01.corp.internal:8443 
Connection flow is 
Browser  ---443 ---> Haproxy -----8443 (https) ---->Jira
So far have run these test from JIRA server against the external
Little more detail of the setup;
 
Multiple Tool services uses haproxy. JIRA is one of them. 
Valid certificate signed by Geotrust on Haproxy configured using SNI.
JIRA links:
JIRA external url (via haproxy) :https://jira.devops.boots.co.uk
JIRA internal url : https://jrap01.corp.internal:8443 
Connection flow is 
Browser  ---443 ---> Haproxy -----8443 (https) ---->Jira
So far have run these test from JIRA server against the external link:
SSLPoke  - Passed
httpclienttest  - Passed
[root@jrap01 ~]# /opt/atlasian/jira/jre/bin/java SSLPoke jira.devops.boots.co.uk 443
Successfully connected
[root@jrap01 ~]# /opt/atlasian/jira/jre/bin/java -jar httpclienttest-1.0.jar jira.devops.boots.co.uk:443
HTTPClient: Connection Successful tohttps://jira.devops.boots.co.uk:443
 
Application links creation (Bitbucket  and Confluence external) -  Passed 
JIRA with Port forwarding - NA
JIRA with broken Application link - No
JIRA with broken proxy configuration -  Not sure 
Configured with Apache in front with Basic Auth password -  NA
Nothing in   jira_home/log/atlassian-jira.log  against the gadget errors or message.
Thanks
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
July 26, 2016

What is the base url for JIRA and have you imported the certificates you need into the keystore?

rahul_bhardwaj July 27, 2016

8I was unable to post more than 2 comments yesterday. Here is the reply to your last question :

 

Base url is  https://jira.devops.boots.co.uk

And yes the certs are imported to Jira java key stores. .I belive that's why SSLPOKE and httpclient test above are working fine from Jira server command line shown above.

 

Thanks

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
July 27, 2016

Ok, that's good.

But it does mean that there's nothing wrong with your JIRA setup.  There's something broken in the proxy that's stopping JIRA making REST calls to itself, and you'll need to fix that.

rahul_bhardwaj July 27, 2016

Are there any steps to run the jira calls from command line and see what is blocking on haproxy ...couldn't not think of anything in that direction.

 

Thanka

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
July 27, 2016

I'd read the logs for when the dashboard is rendered - when I get it wrong, it was the application log that told me to look at the keys and the base urls.

Suggest an answer

Log in or Sign up to answer