Ceph Monitoring Error: "Access denied" on OSD statistics

[jburysom]

Hello there,

Version Information:
zabbix server version 6.4.14 on Red Hat vesion 8.9
ceph version 16.2.5 (0883bdea7337b95e4b611c768c0279868462204a) pacific (stable)

=-=-=-=-=-=

I have configured CEPH monitoring per the following CEPH documentation: https://docs.ceph.com/en/reef/mgr/zabbix/

Originally, after following the instructions I receive no data into zabbix. The following error was displayed in the "info" column when viewing the latest data for the cluster mgr node I added to zabbix: "zabbix tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match localhost."

To resolve the issue I added the following to the /etc/zabbix/zabbix_agent2.conf file and restarted the zabbix agent. This was noted in the zabbix forums at https://www.zabbix.com/forum/zabbix-...te-certificate

I now recieve statistics/data for ceph cluster in zabbix with the exception of OSD data. Any field that references OSDs I recieve the following error in the "info" column while viewing latest data for the mgr node: "Access denied". Has anyone come across this same error and have a solution.

Thanks in advance!

[RPDiep]

I had the same error. I found the solution in the README.md in the zabbix sources:

https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/src/go/plugins/ceph/README.md

You have to give additional caps to the mgr keys.
I did the run with

for mgr in $(ceph auth ls | grep ^mgr) ; do ceph auth caps ${mgr} mds 'allow *' mon 'allow *' osd 'allow *' ; done

(Provided you don't have any non-mgr keys that start with mgr).
Then, restart all managers.

[jburysom]

Thanks for the reply - I have just updated my zabbix installations to version 7.0.4. I will work with the storage admin to see if we can get it working an report back.