Ceph warning - proxmox 3 pve cluster with Full Mesh Network for Ceph Server

dbrega

Member
Sep 6, 2025
35
0
6
I have this warning in ceph:
1793837512862.png
I have already applied the ceph migration guide.
What should I do to fix these warnings?
Thanks in advance.
 
You are missing two steps. Once you are 100% sure packages are upgraded on every node and no external Ceph consumers without aes256k key type exist:
  • To fix "1 auth client entities with insecure key types", use:
Code:
/usr/share/pve-manager/migrations/pve-cephx-rotate-service-keys \
    --apply \
    --confirm-clients-refreshed client.admin

  • To fix the "Monitors" warnings, use:
Code:
/usr/share/pve-manager/migrations/pve-cephx-rotate-service-keys \
    --apply \
    --restrict-ciphers

Then, another last warning similar to "rotating auth service keys using insecure key types" will pop up: wait a few hours for MON to rotate the keys automatically.