Gadgets failing (_MSG_.gh.gadget ) after Jira migration

We migrated from an old JIRA box to a new JIRA server with following changes:

 

  • from 6.4 to 7.1
  • JIRA - Haproxy setup
  • SSL termination on Haproxy
  • New Base url for JIRA (new Production domain)

 

After migration of data from old JIRA server to new Jia server the Gadgets are failing to display for all Dashboards  (_MSG_.gh.gadget **)

 

I am referring this link but couldn't reach to any solution yet https://confluence.atlassian.com/jirakb/how-to-fix-gadget-titles-showing-as-__msg_gadget-813697086.html 

 

Thanks

Rahul

1 answer

1 votes

There is something on the Haproxy preventing JIRA from talking to itself.  (In my case, I didn't have client certificates installed on JIRA so when it went out over the proxy and came back in, it couldn't reach itself)

Have you worked through every scenario on the document you mention?  Could you check the log file for errors?

Little more detail of the setup:
 
Multiple Tool services using haproxy. JIRA is one of them. 
Valid certificate signed by Geotrust on Haproxy configured using SNI for each services.
JIRA links:
JIRA external url (via haproxy) :https://jira.devops.boots.co.uk
JIRA internal url : https://jrap01.corp.internal:8443 
Connection flow is 
Browser  ---443 ---> Haproxy -----8443 (https) ---->Jira
So far have run these test from JIRA server against the external
Little more detail of the setup;
 
Multiple Tool services uses haproxy. JIRA is one of them. 
Valid certificate signed by Geotrust on Haproxy configured using SNI.
JIRA links:
JIRA external url (via haproxy) :https://jira.devops.boots.co.uk
JIRA internal url : https://jrap01.corp.internal:8443 
Connection flow is 
Browser  ---443 ---> Haproxy -----8443 (https) ---->Jira
So far have run these test from JIRA server against the external link:
SSLPoke  - Passed
httpclienttest  - Passed
[root@jrap01 ~]# /opt/atlasian/jira/jre/bin/java SSLPoke jira.devops.boots.co.uk 443
Successfully connected
[root@jrap01 ~]# /opt/atlasian/jira/jre/bin/java -jar httpclienttest-1.0.jar jira.devops.boots.co.uk:443
HTTPClient: Connection Successful tohttps://jira.devops.boots.co.uk:443
 
Application links creation (Bitbucket  and Confluence external) -  Passed 
JIRA with Port forwarding - NA
JIRA with broken Application link - No
JIRA with broken proxy configuration -  Not sure 
Configured with Apache in front with Basic Auth password -  NA
Nothing in   jira_home/log/atlassian-jira.log  against the gadget errors or message.
Thanks

What is the base url for JIRA and have you imported the certificates you need into the keystore?

8I was unable to post more than 2 comments yesterday. Here is the reply to your last question :

 

Base url is  https://jira.devops.boots.co.uk

And yes the certs are imported to Jira java key stores. .I belive that's why SSLPOKE and httpclient test above are working fine from Jira server command line shown above.

 

Thanks

Ok, that's good.

But it does mean that there's nothing wrong with your JIRA setup.  There's something broken in the proxy that's stopping JIRA making REST calls to itself, and you'll need to fix that.

Are there any steps to run the jira calls from command line and see what is blocking on haproxy ...couldn't not think of anything in that direction.

 

Thanka

I'd read the logs for when the dashboard is rendered - when I get it wrong, it was the application log that told me to look at the keys and the base urls.

Suggest an answer

Log in or Join to answer
Community showcase
Sarah Schuster
Posted Jan 29, 2018 in Jira

What are common themes you've seen across successful & failed Jira Software implementations?

Hey everyone! My name is Sarah Schuster, and I'm a Customer Success Manager in Atlassian specializing in Jira Software Cloud. Over the next few weeks I will be posting discussion topics (8 total) to ...

2,739 views 11 18
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot