Ceph » mgr » Dashboard

Description of problem¶

trusted_ip_list value of iSCSI service doesn't work in the deployed rbd-target-api service.
The dashboard can't manage iSCSI volumes because it's not trusted.

How reproducible¶

Create an iSCSI service in Cluster -> Services page. Enter active mgr's IP in trusted_ip_list field.

Actual results¶

The deployed service can't be used because the trusted_ip_list value is not correct in the config:

# cat /var/lib/ceph/f9697acb-e10c-4c25-91d2-c56e44589ecd/iscsi.foo.osd0.kntatm/iscsi-gateway.cfg
# This file is generated by cephadm.
[config]
cluster_client_name = client.iscsi.foo.osd0.kntatm
pool = rbd
trusted_ip_list = ['192.168.121.1']     <-- this should be a comma-separated string, not a string list.
minimum_gateways = 1
api_port = ''
api_user = admin
api_password = admin
api_secure = False
log_to_stderr = True
log_to_stderr_prefix = debug
log_to_file = False

Expected results¶

The user should be able to manage iSCSI volumes.

Additional info¶

mgr log:

2020-12-04T02:38:16.422+0000 7ff276abc640  0 [dashboard DEBUG urllib3.connectionpool] Resetting dropped connection: osd0
2020-12-04T02:38:16.426+0000 7ff276abc640  0 [dashboard DEBUG urllib3.connectionpool] http://osd0:5000 "GET /api/_ping HTTP/1.1" 403 61
2020-12-04T02:38:16.426+0000 7ff276abc640  0 [dashboard ERROR rest_client] iscsi REST API failed GET req status: 403
2020-12-04T02:38:16.426+0000 7ff276abc640  0 [dashboard INFO request] [::ffff:127.0.0.1:38632] [GET] [200] [0.019s] [admin] [102.0B] /ui-api/iscsi/overview

Service spec:

# ceph orch ls --format=json | jq
...
    "service_id": "foo",
    "service_name": "iscsi.foo",
    "service_type": "iscsi",
    "spec": {
      "api_password": "admin",
      "api_user": "admin",
      "pool": "rbd",
      "trusted_ip_list": [
        "192.168.121.1" 
      ]
    },
...