Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
This project is now read‑only. Starting Monday, February 2, please use https://ibm-ceph.atlassian.net/ for all bug tracking management.

Bug 1995090

Summary: [gss][doc] Mention "trusted_ip_list" in RHCS 4 Ceph iSCSI gateway installation documentation
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: Geo Jose <gjose>
Component: DocumentationAssignee: Eliska <ekristov>
Documentation sub component: Block Device Guide QA Contact: Manohar Murthy <mmurthy>
Status: CLOSED CURRENTRELEASE Docs Contact:
Severity: medium    
Priority: unspecified CC: asriram, ekristov, hyelloji, kdreyer, mkasturi, pnataraj, rmandyam, vereddy
Version: 4.2   
Target Milestone: ---   
Target Release: 4.3   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-05-05 18:50:15 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Geo Jose 2021-08-18 12:37:42 UTC
Describe the issue:
 - In RHCS 4 Ceph iSCSI gateway installation documentation, missing to mention the parameter "trusted_ip_list" in iscsigws.yml

Document URL: 
https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4/html/block_device_guide/the-ceph-iscsi-gateway#installing-the-ceph-iscsi-gateway-using-ansible_block

Chapter/Section Number and Title:
 7.3.2. Installing the Ceph iSCSI gateway using Ansible
 In step 3.

Product Version:
 RHCS 4.

Comment 1 Geo Jose 2021-08-18 13:11:46 UTC
## Issue
 - Since "trusted_ip_list" is not mentioned to enable / add the details of "trusted_ip_list" in iscsigws.yml, while following the documentation this parameter will kept as default. This default settings(trusted_ip_list=192.168.122.1) will be added in iscsi-gateway.cfg which(IP 192.168.122.1) is not relevant.

## Details
 - To fix the code issue, we have a Bug 1994930.
 - As per comment 3, in Bug 1994930 [2], "trusted_ip_list" should be configured. But this part is missing from our documentation.

## Recommendations in [1]
3) Ansible places a file in the /usr/share/ceph-ansible/group_vars/ directory called iscsigws.yml.sample. Create a copy of the iscsigws.yml.sample file named it iscsigws.yml
4) Open the iscsigws.yml file for editing.
5) Uncomment the "trusted_ip_list" option and update the values accordingly, using IPv4 or IPv6 addresses.
    For example, adding two gateways with the IPv4 addresses of 10.172.19.21 and 10.172.19.22, configure trusted_ip_list like this:
     trusted_ip_list: 10.172.19.21,10.172.19.22

Please verify these recommendations from engineering and make the modification and update the documentation as soon as possible.  


## URLS
[1] https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4/html/block_device_guide/the-ceph-iscsi-gateway#installing-the-ceph-iscsi-gateway-using-ansible_block
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1994930#c3
[3] https://docs.ceph.com/en/latest/rbd/iscsi-target-cli/

Comment 3 Veera Raghava Reddy 2022-04-28 11:35:48 UTC
Which is the target release. Currently, it is "Backlog"

Comment 6 Preethi 2022-05-04 11:25:42 UTC
Changes are implemented. looks good. Moving to verified state.