Bug 2298581 - Deployment of NVMeOF GW Service is Failing with mTLS in the new RC build
Summary: Deployment of NVMeOF GW Service is Failing with mTLS in the new RC build
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: NVMeOF
Version: 7.1
Hardware: x86_64
OS: Linux
urgent
urgent
Target Milestone: ---
: 7.1z1
Assignee: Aviv Caro
QA Contact: Krishna Ramaswamy
ceph-doc-bot
URL:
Whiteboard:
Depends On: 2282560
Blocks: 2282825
TreeView+ depends on / blocked
 
Reported: 2024-07-18 07:17 UTC by Krishna Ramaswamy
Modified: 2024-09-17 17:49 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHCEPH-9356 0 None None None 2024-07-18 09:54:06 UTC

Description Krishna Ramaswamy 2024-07-18 07:17:43 UTC
Description:

Deployment of NVMeOF GW Service is Failing with mTLS in the new RC build 

nvmeof-rhel9:1.2.16-3


[root@cephqe-node1 ~]# ceph versions
{
    "mon": {
        "ceph version 18.2.1-224.el9cp (e65d95a3893a13895a9089eedaa7d34a37f1003b) reef (stable)": 5
    },
    "mgr": {
        "ceph version 18.2.1-224.el9cp (e65d95a3893a13895a9089eedaa7d34a37f1003b) reef (stable)": 2
    },
    "osd": {
        "ceph version 18.2.1-224.el9cp (e65d95a3893a13895a9089eedaa7d34a37f1003b) reef (stable)": 19
    },
    "overall": {
        "ceph version 18.2.1-224.el9cp (e65d95a3893a13895a9089eedaa7d34a37f1003b) reef (stable)": 26
    }
}


Error:

[root@cephqe-node1 ~]# ceph orch apply -i gw-conf-with-mtls.yaml
Error EINVAL: enable_auth is true but attribute(s) not set in the spec
[root@cephqe-node1 ~]# 


Config Service Specification file:

service_type: nvmeof
service_id: rbd
service_name: nvmeof.rbd
placement:
  hosts:
  - cephqe-node2
  - cephqe-node3
  - cephqe-node5
  - cephqe-node7
spec:
  allowed_consecutive_spdk_ping_failures: 1
  bdevs_per_cluster: 32
  conn_retries: 10
  discovery_port: 8009
  client_cert: /src/mtls/client.crt
  client_key: /src/mtls/client.key
  server_cert: /src/mtls/server.crt
  server_key: /src/mtls/server.key
  enable_auth: true
  enable_monitor_client: true
  enable_prometheus_exporter: true
  log_directory: /var/log/ceph/
  log_files_enabled: true
  log_files_rotation_enabled: true
  log_level: INFO
  max_log_directory_backups: 10
  max_log_file_size_in_mb: 10
  max_log_files_count: 20
  monitor_timeout: 1.0
  omap_file_lock_duration: 20
  omap_file_lock_retries: 30
  omap_file_lock_retry_sleep_interval: 1.0
  omap_file_update_reloads: 10
  pool: rbd
  port: 5500
  rpc_socket_dir: /var/tmp/
  rpc_socket_name: spdk.sock
  spdk_log_level: WARNING
  spdk_path: /usr/local/bin/nvmf_tgt
  spdk_ping_interval_in_seconds: 2.0
  spdk_timeout: 60.0
  state_update_interval_sec: 5
  state_update_notify: true
  tgt_cmd_extra_args: --cpumask=0xF
  tgt_path: /usr/local/bin/nvmf_tgt
  transport_tcp_options:
    in_capsule_data_size: 8192
    max_io_qpairs_per_ctrlr: 7
  transports: tcp
  verbose_log_messages: true
  verify_nqns: true


Note You need to log in before you can comment on or make changes to this bug.