[msdmazvoid]

Summary

Adds an optional local admin UI embedded in kouja-agent, plus live iSCSI traffic and connection metrics.

Admin UI

• Loopback-only listener at 127.0.0.1:9444, disabled by default, no authentication.
• Raw YAML configuration editor with validation, atomic writes, backups, and last-good tracking.
• TLS server certificate DNS/IP SAN display and client certificate/CA downloads.
• Live VG registration/deregistration and storage-class mapping changes through shared agent services.
• Status view for agent, VGs, volumes, sessions, observations, and problem operations.
• Embedded Preact/TypeScript/Vite UI built by the Makefile.

Live iSCSI metrics

• Per-target, per-initiator, and per-LUN traffic counters.
• Read/write bytes and sampled read/write/command rates.
• Login, session, digest, timeout, abort, and reset error counters.
• Client source IP and port connections from /proc/net/tcp(6), mapped to the target and initiator where unambiguous.
• Metrics are best-effort and do not fail /api/status.

iSCSI target control

• A per-target Disable action force-unexports the live LIO target and drops active sessions.
• The volume and export definition remain in SQLite in the existing available/unexported state.
• Disabled exports remain visible in the volume table with an Enable target action that recreates the target from the stored definition and generates a new credential when needed.
• The actions use the shared operation manager for locking, journaling, credentials, and forced teardown, with a unique operation per admin action.

Setup and release

• Interactive deploy/kouja-init.sh TLS/config initializer.
• make all produces release binaries plus bin/config.example.yaml and bin/kouja-init.sh.
• Node-free make build-go fallback.
• CI builds the embedded UI and verifies the fallback build.
• Design documentation in docs/designs/admin-ui.md.

Security notes

• The admin listener has no authentication and is root-equivalent for any local process that can reach it. It is disabled by default and rejects non-loopback bind addresses.
• Client private keys are download-only by explicit operator action; the CA private key and server private key are never served.
• Live connection data is read from the host network namespace and may be unavailable or ambiguous when targets share an initiator address.

Validation

• make all
• make test
• make test-bdd
• make coverage-check (80.2%)
• make lint (0 issues)
• Race tests for internal/adminui and internal/target
• Live iSCSI target/configfs and /proc/net/tcp probe