Bug 2073881

Summary: [cee/sd][Cephadm] upgrading cephadm package always deletes the cephadm user and related ssh-keys
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: Kritik Sachdeva <ksachdev>
Component: CephadmAssignee: Adam King <adking>
Status: CLOSED ERRATA QA Contact: Rahul Lepakshi <rlepaksh>
Severity: medium Docs Contact: Akash Raj <akraj>
Priority: unspecified    
Version: 5.0CC: adking, akraj, gjose, kdreyer, mgowri, mmuench, rlepaksh, vereddy
Target Milestone: ---Keywords: Rebase
Target Release: 5.2   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: ceph-16.2.8-2.el8cp Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-09 17:38:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2102272    

Description Kritik Sachdeva 2022-04-11 03:41:44 UTC
Description of problem:
Upgrading the cephadm package either manually or using the cephadm-preflight.yml playbook, removes the cephadm user from the system, and hence deletes the associated ssh-keys as well.

And the ceph status shows the below health warning.
~~~
[WRN] CEPHADM_HOST_CHECK_FAILED: 1 hosts fail cephadm check
~~~

Version-Release number of selected component (if applicable):
Upgrading from cephadm-2:16.2.0-117.el8cp.noarch to cephadm-2:16.2.0-152.el8cp.noarch


Steps to Reproduce:
1. Install the cephadm package
2. Upgrade the package either manually using yum or ansible playbook

Actual results:
"cephadm" user and the corresponding associated ssh-keys are removed after the upgrade

Expected results:
"cephadm" user should not be removed after upgrade

Comment 1 Adam King 2022-04-11 12:30:10 UTC
Do you think this upstream tracker looks like the same issue https://tracker.ceph.com/issues/54530?

Comment 18 errata-xmlrpc 2022-08-09 17:38:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Red Hat Ceph Storage Security, Bug Fix, and Enhancement Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5997