Actions
Bug #48454
closedmgr/dashboard: trusted_ip_list of iSCSI service doesn't work
% Done:
100%
Source:
Development
Tags:
backport_processed
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
Description of problem¶
trusted_ip_list value of iSCSI service doesn't work in the deployed rbd-target-api service.
The dashboard can't manage iSCSI volumes because it's not trusted.
How reproducible¶
Create an iSCSI service in Cluster -> Services page. Enter active mgr's IP in trusted_ip_list field.
Actual results¶
The deployed service can't be used because the trusted_ip_list value is not correct in the config:
# cat /var/lib/ceph/f9697acb-e10c-4c25-91d2-c56e44589ecd/iscsi.foo.osd0.kntatm/iscsi-gateway.cfg # This file is generated by cephadm. [config] cluster_client_name = client.iscsi.foo.osd0.kntatm pool = rbd trusted_ip_list = ['192.168.121.1'] <-- this should be a comma-separated string, not a string list. minimum_gateways = 1 api_port = '' api_user = admin api_password = admin api_secure = False log_to_stderr = True log_to_stderr_prefix = debug log_to_file = False
Expected results¶
The user should be able to manage iSCSI volumes.
Additional info¶
mgr log:
2020-12-04T02:38:16.422+0000 7ff276abc640 0 [dashboard DEBUG urllib3.connectionpool] Resetting dropped connection: osd0 2020-12-04T02:38:16.426+0000 7ff276abc640 0 [dashboard DEBUG urllib3.connectionpool] http://osd0:5000 "GET /api/_ping HTTP/1.1" 403 61 2020-12-04T02:38:16.426+0000 7ff276abc640 0 [dashboard ERROR rest_client] iscsi REST API failed GET req status: 403 2020-12-04T02:38:16.426+0000 7ff276abc640 0 [dashboard INFO request] [::ffff:127.0.0.1:38632] [GET] [200] [0.019s] [admin] [102.0B] /ui-api/iscsi/overview
Service spec:
# ceph orch ls --format=json | jq ... "service_id": "foo", "service_name": "iscsi.foo", "service_type": "iscsi", "spec": { "api_password": "admin", "api_user": "admin", "pool": "rbd", "trusted_ip_list": [ "192.168.121.1" ] }, ...
Files
Updated by Kiefer Chang over 3 years ago
- Status changed from In Progress to Fix Under Review
- Pull request ID set to 38440
Updated by Ernesto Puerta over 3 years ago
- Status changed from Fix Under Review to Pending Backport
Updated by Nathan Cutler over 3 years ago
- Copied to Backport #48484: octopus: mgr/dashboard: trusted_ip_list of iSCSI service doesn't work added
Updated by Ernesto Puerta about 3 years ago
- Project changed from mgr to Dashboard
- Category changed from 141 to Component - iSCSI
Updated by Konstantin Shalygin 12 months ago
- Status changed from Pending Backport to Resolved
- % Done changed from 0 to 100
Actions