Back to bug 2044983

Who When What Removed Added
Parth Arora 2022-01-25 12:35:58 UTC Assignee tnielsen paarora
Mudit Agarwal 2022-01-25 12:37:17 UTC CC muagarwa
Link ID Github rook/rook/pull/9609
Status NEW POST
Red Hat Bugzilla 2022-01-25 12:37:17 UTC Doc Type If docs needed, set a value No Doc Update
Neha Berry 2022-01-27 13:47:49 UTC QA Contact ebenahar ikave
CC nberry
RHEL Program Management 2022-01-27 13:47:56 UTC Target Release --- ODF 4.10.0
Travis Nielsen 2022-02-21 16:47:33 UTC CC tnielsen
Flags needinfo?(paarora)
Parth Arora 2022-02-22 15:00:43 UTC Flags needinfo?(paarora)
OpenShift BugZilla Robot 2022-02-22 15:04:48 UTC Link ID Github red-hat-storage/rook/pull/348
OpenShift BugZilla Robot 2022-02-23 13:09:02 UTC Status POST MODIFIED
Mudit Agarwal 2022-02-28 13:38:31 UTC Status MODIFIED ON_QA
Fixed In Version 4.10.0-171
Parth Arora 2022-03-07 06:33:25 UTC Flags needinfo?(muagarwa)
Neha Berry 2022-03-10 10:29:07 UTC QA Contact ikave vavuthu
Parth Arora 2022-03-31 10:23:41 UTC CC paarora
Mudit Agarwal 2022-04-05 03:49:42 UTC Doc Text Upgrade flag:
For upgrading the older caps of 'CSI-user'(For example client.csi-cephfs-provisioner) to a newer one with new permissions.

Sample run: `python3 /etc/ceph/create-external-cluster-resources.py --upgrade`, this will upgrade all the default CSI user

PS: Upgrade flag should only be used to append new permissions to users, it shouldn't be used for changing user already applied for permission, for example, you shouldn't change in which pool user has access.

Upgrade Scenarios where upgrade flag would be needed:

1) If the customer already has RHCS deployment with odf.

i) So the CSI users are already created(4.9 or earlier) and if run the python script in (4.10 or later) the caps will still be the same.
ii) and so if we need to have the upgraded caps of 4.10 script, we need to run the script with --upgrade flag

2) If the customer doesn't have rhcs cluster and creates it for the first time

So there will be no CSI users and it will create for the first time and will be created with the upgraded caps permission, no need to run the upgrade flag in this case.
Doc Type No Doc Update Bug Fix
Mudit Agarwal 2022-04-05 03:50:23 UTC Blocks 2056571
Vijay Avuthu 2022-04-05 14:21:27 UTC Status ON_QA VERIFIED
Shilpi Sharma 2022-04-06 13:53:34 UTC Doc Text Upgrade flag:
For upgrading the older caps of 'CSI-user'(For example client.csi-cephfs-provisioner) to a newer one with new permissions.

Sample run: `python3 /etc/ceph/create-external-cluster-resources.py --upgrade`, this will upgrade all the default CSI user

PS: Upgrade flag should only be used to append new permissions to users, it shouldn't be used for changing user already applied for permission, for example, you shouldn't change in which pool user has access.

Upgrade Scenarios where upgrade flag would be needed:

1) If the customer already has RHCS deployment with odf.

i) So the CSI users are already created(4.9 or earlier) and if run the python script in (4.10 or later) the caps will still be the same.
ii) and so if we need to have the upgraded caps of 4.10 script, we need to run the script with --upgrade flag

2) If the customer doesn't have rhcs cluster and creates it for the first time

So there will be no CSI users and it will create for the first time and will be created with the upgraded caps permission, no need to run the upgrade flag in this case.
.Adding an upgrade flag to grant new permissions

With this update, you can upgrade the older caps of CSI users, for example, `client.csi-cephfs-provisioner` to a newer one with new permissions. You can use the upgrade flag only to provide new permissions and in the case when you already have RHCS deployment with ODF. In this case, you already have CSI users so you need to run the script with upgrade flag, for example, `python3 /etc/ceph/create-external-cluster-resources.py --upgrade`. When you are freshly creating a RHCS cluster then upgrade caps permissions are created no need to run the script.
CC shilpsha
Shilpi Sharma 2022-04-10 17:37:31 UTC Doc Text .Adding an upgrade flag to grant new permissions

With this update, you can upgrade the older caps of CSI users, for example, `client.csi-cephfs-provisioner` to a newer one with new permissions. You can use the upgrade flag only to provide new permissions and in the case when you already have RHCS deployment with ODF. In this case, you already have CSI users so you need to run the script with upgrade flag, for example, `python3 /etc/ceph/create-external-cluster-resources.py --upgrade`. When you are freshly creating a RHCS cluster then upgrade caps permissions are created no need to run the script.
.Adding an upgrade flag to grant new permissions

With this update, you can upgrade the `cephCSIKeyrings`, for example, client.csi-cephfs-provision with new permissions caps. To upgrade all the `cephCSIKeyrings` run `python3 /etc/ceph/create-external-cluster-resources.py --upgrade`. The upgrade flag is required when you already have an ODF deployment with RHCS(external Ceph storage system) and now you are either upgrading or adding a new ODF deployment(multi-tenant) to the RHCS cluster. The upgrade flag is not required when you are freshly creating an ODF deployment with RHCS cluster.
Mudit Agarwal 2022-04-15 07:22:08 UTC Flags needinfo?(muagarwa)
RHEL Program Management 2022-04-21 09:12:44 UTC Resolution --- CURRENTRELEASE
Status VERIFIED CLOSED
Last Closed 2022-04-21 09:12:44 UTC
Elad 2023-08-09 17:03:01 UTC CC odf-bz-bot

Back to bug 2044983