Ceph iSCSI gateway state shows 'down' on dashboard

This document (000019746) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Enterprise Storage 6
SUSE Enterprise Storage 5.5

Situation

All the IGW-node "rbd-target-api" services are starting up properly, and there were no problem observed.

Also, all the other web pages in the Ceph Dashboard are working fine but only the iSCSI pages ("Overview" and "Targets" tab) fails.
 
After investigation, we found that the  "http" (instead of "https" ) service_url for iSCSI Gateway was configured in the dashboard as shown below:
IGW-node1 # ceph dashboard iscsi-gateway-list
  {"gateways": {"IGW-node1.suse.lab": {"service_url": "http://admin:admin@192.168.100.101:5000"}, "IGW-node2.suse.lab": {"service_url": "http://admin:admin@192.168.100.102:5000"}, "IGW-node3.suse.lab": {"service_url": "http://admin:admin@192.168.100.103:5000"}}}

Resolution

A https connection is required, and so we need to change the service_url from "http" to "https".

Please note : This operation need to plan a maintenance window down time to perform the following steps because the iSCSI gateway need to be stop and restarted.

In the following steps, we will change the service_url for the iSCSI Gateway in Node "IGW-node1" first.
They can change the service_url for Node "IGW-node2" and "IGW-node3" later.

1. Inside Admin Node, enable the SSL certificate verification:
# ceph dashboard set-iscsi-api-ssl-verification true

2. Inside iSCSI Node "IGW-node1", stop the iSCSI Gateway service:
# systemctl stop rbd-target-api

3. Inside Admin Node, remove the "IGW-node1.suse.lab" service from dashboard:
# ceph dashboard iscsi-gateway-rm IGW-node1.suse.lab

4. Inside Node "IGW-node1", start the iSCSI Gateway service:
# systemctl start rbd-target-api

5. Inside Node "Admin-node", add the "IGW-node1.suse.lab" service to dashboard using the https service_url.
# ceph dashboard iscsi-gateway-add https://admin:admin@IGW-node1.suse.lab:5000

Next, open the Mozilla "Firefox" Web Browser and enter the Ceph Dashboard URL and login.
Got to the iSCSI "Overview" Web page to verify whether the "IGW-node1.suse.lab" Gateway is in "UP" state.

6. To change the service_url for iSCSI Gateway in all other iSCSI Nodes("IGW-node2" and "IGW-node3"), perform step 2 to step 5 again.

Remember to replace the hostname of the iSCSI Node to the correct hostname.

Cause

"http" (instead of "https") service_url for iSCSI Gateway is configured in the dashboard

Status

Top Issue

Additional Information

To configure the dashboard to avoid SSL certificate verification when accessing ceph-iscsi API:
# ceph dashboard set-iscsi-api-ssl-verification false

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000019746
  • Creation Date: 22-Oct-2020
  • Modified Date:27-Oct-2020
    • SUSE Enterprise Storage

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback@suse.com

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.


SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center