Project

General

Profile

Bug #48454

mgr/dashboard: trusted_ip_list of iSCSI service doesn't work

Added by Kiefer Chang about 2 years ago. Updated 6 months ago.

Status:
Pending Backport
Priority:
Normal
Assignee:
Category:
Component - iSCSI
Target version:
-
% Done:

0%

Source:
Development
Tags:
backport_processed
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Description of problem

trusted_ip_list value of iSCSI service doesn't work in the deployed rbd-target-api service.
The dashboard can't manage iSCSI volumes because it's not trusted.

How reproducible

Create an iSCSI service in Cluster -> Services page. Enter active mgr's IP in trusted_ip_list field.

Actual results

The deployed service can't be used because the trusted_ip_list value is not correct in the config:

# cat /var/lib/ceph/f9697acb-e10c-4c25-91d2-c56e44589ecd/iscsi.foo.osd0.kntatm/iscsi-gateway.cfg
# This file is generated by cephadm.
[config]
cluster_client_name = client.iscsi.foo.osd0.kntatm
pool = rbd
trusted_ip_list = ['192.168.121.1']     <-- this should be a comma-separated string, not a string list.
minimum_gateways = 1
api_port = ''
api_user = admin
api_password = admin
api_secure = False
log_to_stderr = True
log_to_stderr_prefix = debug
log_to_file = False

Expected results

The user should be able to manage iSCSI volumes.

Additional info

mgr log:

2020-12-04T02:38:16.422+0000 7ff276abc640  0 [dashboard DEBUG urllib3.connectionpool] Resetting dropped connection: osd0
2020-12-04T02:38:16.426+0000 7ff276abc640  0 [dashboard DEBUG urllib3.connectionpool] http://osd0:5000 "GET /api/_ping HTTP/1.1" 403 61
2020-12-04T02:38:16.426+0000 7ff276abc640  0 [dashboard ERROR rest_client] iscsi REST API failed GET req status: 403
2020-12-04T02:38:16.426+0000 7ff276abc640  0 [dashboard INFO request] [::ffff:127.0.0.1:38632] [GET] [200] [0.019s] [admin] [102.0B] /ui-api/iscsi/overview

Service spec:

# ceph orch ls --format=json | jq
...
    "service_id": "foo",
    "service_name": "iscsi.foo",
    "service_type": "iscsi",
    "spec": {
      "api_password": "admin",
      "api_user": "admin",
      "pool": "rbd",
      "trusted_ip_list": [
        "192.168.121.1" 
      ]
    },
...

red.png View (17.2 KB) Kiefer Chang, 12/04/2020 02:40 AM


Related issues

Copied to Dashboard - Backport #48484: octopus: mgr/dashboard: trusted_ip_list of iSCSI service doesn't work Need More Info

History

#1 Updated by Kiefer Chang about 2 years ago

  • Status changed from In Progress to Fix Under Review
  • Pull request ID set to 38440

#2 Updated by Ernesto Puerta about 2 years ago

  • Status changed from Fix Under Review to Pending Backport

#3 Updated by Nathan Cutler about 2 years ago

  • Copied to Backport #48484: octopus: mgr/dashboard: trusted_ip_list of iSCSI service doesn't work added

#4 Updated by Ernesto Puerta almost 2 years ago

  • Project changed from mgr to Dashboard
  • Category changed from 141 to Component - iSCSI

#5 Updated by Backport Bot 6 months ago

  • Tags set to backport_processed

Also available in: Atom PDF