Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

auth: tolerate missing mgr keys #11360

Closed
wants to merge 2 commits into from
Closed

auth: tolerate missing mgr keys #11360

wants to merge 2 commits into from

Commits on Oct 5, 2016

  1. auth/cephx: tolerate missing rotating keys 

    During an upgrade, we may have a client requesting an
MGR service key but not have one in the database yet,
either because we *just* upgraded and haven't generated
one yet, or because the leader mon hasn't been upgraded
yet.

Fix this by silently tolerating a missing key as long as
one or more other service keys were present and we have
something to give to the client.

Signed-off-by: Sage Weil <sage@redhat.com>
    @liewegas
    liewegas committed Oct 5, 2016
    Configuration menu
    Copy the full SHA
    c77847f View commit details
    Browse the repository at this point in the history

  2. auth/cephx: do not re-request *only* the MGR key 

    If we request a bunch of service keys, we may not get
back a MGR key because of an in-progress upgrade.  If we
have everything we need except for just the MGR key, do
not bother re-requesting it.  Instead just continue and
we'll re-request it later when the secrets rotate.

Signed-off-by: Sage Weil <sage@redhat.com>
    @liewegas
    liewegas committed Oct 5, 2016
    Configuration menu
    Copy the full SHA
    4b78980 View commit details
    Browse the repository at this point in the history