Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

jewel: ceph-disk --dmcrypt create must not require admin key #12033

Merged
1 commit merged into from Dec 6, 2016
Merged

jewel: ceph-disk --dmcrypt create must not require admin key #12033

1 commit merged into from Dec 6, 2016

Commits on Nov 16, 2016

  1. mon,ceph-disk: add lockbox permissions to bootstrap-osd 

    ceph-disk --dmcrypt needs to put a config-key and authorize
the OSD to get it back. The corresponding permissions are
added to the bootstrap-osd profile in the monitor.

When preparing the OSD lockbox, use the bootstrap-osd profile instead of
implicitly requiring admin permissions to perform the initial config-key
and auth get-or-create operations.

Fixes: http://tracker.ceph.com/issues/17849

Signed-off-by: Loic Dachary <loic@dachary.org>
(cherry picked from commit c1c6224)
    @ldachary
    ldachary committed Nov 16, 2016
    Configuration menu
    Copy the full SHA
    652f490 View commit details
    Browse the repository at this point in the history