Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nautilus: mon: auth mon isn't loading full KeyServerData after restart #28993

merged 2 commits into from Jul 30, 2019


Copy link

commented Jul 11, 2019

liewegas added 2 commits Jul 2, 2019
auth/cephx/CephxKeyServer: make clear_secrets() clear rotating secret…
…s too

Clear the rotating secrets.  And also reset the versions.

Signed-off-by: Sage Weil <>
(cherry picked from commit e1600b1)
mon/AuthMonitor: clear_secrets() in create_initial()
If we are creating the initial state and initial proposal, start with an
empty keyring.  Specifically, we want to clear out any rotating secrets
from a previously failed paxos round so that the subsequent call to
check_rotate() will correctly populate the initial proposal with new
rotating keys.  (When we don't do this, the leader OSD will have the
keys from an earlier round in memory but no other mons will.)

Signed-off-by: Sage Weil <>
(cherry picked from commit a346713)

@smithfarm smithfarm self-assigned this Jul 11, 2019

@smithfarm smithfarm added this to the nautilus milestone Jul 11, 2019

@smithfarm smithfarm requested review from liewegas and tchaikov Jul 11, 2019


This comment has been minimized.

Copy link

commented Jul 24, 2019

@yuriw yuriw merged commit edf4541 into ceph:nautilus Jul 30, 2019

4 checks passed

Docs: build check OK - docs built
Signed-off-by all commits in this PR are signed
Unmodified Submodules submodules for project are unmodified
make check make check succeeded

@smithfarm smithfarm deleted the smithfarm:wip-40730-nautilus branch Aug 21, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.