Ceph iSCSI gateway state shows 'down' on dashboard

This document (000019746) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Enterprise Storage 6
SUSE Enterprise Storage 5.5

Situation

All the IGW-node "rbd-target-api" services are starting up properly, and there were no problem observed.

Also, all the other web pages in the Ceph Dashboard are working fine but only the iSCSI pages ("Overview" and "Targets" tab) fails.

After investigation, we found that the "http" (instead of "https" ) service_url for iSCSI Gateway was configured in the dashboard as shown below:

IGW-node1 # ceph dashboard iscsi-gateway-list
  {"gateways": {"IGW-node1.suse.lab": {"service_url": "http://admin:admin@192.168.100.101:5000"}, "IGW-node2.suse.lab": {"service_url": "http://admin:admin@192.168.100.102:5000"}, "IGW-node3.suse.lab": {"service_url": "http://admin:admin@192.168.100.103:5000"}}}

Resolution

A https connection is required, and so we need to change the service_url from "http" to "https".

Please note : This operation need to plan a maintenance window down time to perform the following steps because the iSCSI gateway need to be stop and restarted.

In the following steps, we will change the service_url for the iSCSI Gateway in Node "IGW-node1" first.
They can change the service_url for Node "IGW-node2" and "IGW-node3" later.

1. Inside Admin Node, enable the SSL certificate verification:

# ceph dashboard set-iscsi-api-ssl-verification true

2. Inside iSCSI Node "IGW-node1", stop the iSCSI Gateway service:

# systemctl stop rbd-target-api

3. Inside Admin Node, remove the "IGW-node1.suse.lab" service from dashboard:

# ceph dashboard iscsi-gateway-rm IGW-node1.suse.lab

4. Inside Node "IGW-node1", start the iSCSI Gateway service:

# systemctl start rbd-target-api

5. Inside Node "Admin-node", add the "IGW-node1.suse.lab" service to dashboard using the https service_url.

# ceph dashboard iscsi-gateway-add https://admin:admin@IGW-node1.suse.lab:5000

Next, open the Mozilla "Firefox" Web Browser and enter the Ceph Dashboard URL and login.
Got to the iSCSI "Overview" Web page to verify whether the "IGW-node1.suse.lab" Gateway is in "UP" state.

6. To change the service_url for iSCSI Gateway in all other iSCSI Nodes("IGW-node2" and "IGW-node3"), perform step 2 to step 5 again.

Remember to replace the hostname of the iSCSI Node to the correct hostname.

Cause

"http" (instead of "https") service_url for iSCSI Gateway is configured in the dashboard

Status

Top Issue

Additional Information

To configure the dashboard to avoid SSL certificate verification when accessing ceph-iscsi API:

# ceph dashboard set-iscsi-api-ssl-verification false

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.