MN7675's latest activity
-
MMN7675 replied to the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry?.An update on my situation. Running ceph auth ls shows that there are no entries for mon keys, but they do exist on file. I must be missing a step to somehow enter the generated mon keys into some sort of ceph database? I just don't know what...
-
MMN7675 replied to the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry?.@tchaikov I was running into this issue: FAIL: These keys cannot be rewritten where their daemons read them, so rotating them would strand the daemons: mon. has neither a keyring file nor a bluestore device under...
-
MMN7675 reacted to tchaikov's post in the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry? with
Like.
auth entities are per daemon. and pve does remove a daemon's entity when destroying it. Do you remember destroying each of those individually, or were the hosts removed with services still on them? Either way `ceph auth del` is the right move at... -
MMN7675 replied to the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry?.I found this section of the ceph documentation, but I'm not sure these are the right commands to run for this problem: Link to Documentation.
-
MMN7675 reacted to gurubert's post in the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry? with Like.
What does "ceph auth ls" show? Do not post the output here but look for the mentioned keys. If not needed any more they can be deleted.
-
MMN7675 replied to the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry?.Ah that was helpful, thank you. Now that I understood what tool to use, I was able to delete the keys using ceph auth del <key> for all of the offending keys. Now a new error has cropped up when doing the dry run: FAIL: These keys cannot be...
-
MMN7675 posted the thread CEHPX Disabled, CEPH Key Migration - Removing an auth entry? in Proxmox VE: Installation and configuration.Hello, I have cephx disabled for our cluster, but I am still getting these insecure keyring errors, which I would like to migrate. I am running into 2 issues, one is a WARN the other is a FAIL: WARN: No OSD in this cluster carries the fsid of...