Bug 2299705
| Summary: | Invalid SSL key and Cert format found on NVMe Service configuration export using orchestration command | ||
|---|---|---|---|
| Product: | [Red Hat Storage] Red Hat Ceph Storage | Reporter: | Sunil Kumar Nagaraju <sunnagar> |
| Component: | Cephadm | Assignee: | Adam King <adking> |
| Status: | NEW --- | QA Contact: | Mohit Bisht <mobisht> |
| Severity: | urgent | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.1 | CC: | acaro, cephqe-warriors, kramaswa, mmurthy, nia, rlepaksh |
| Target Milestone: | --- | Flags: | sunnagar:
needinfo?
(nia) |
| Target Release: | 7.2 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Known Issue | |
| Doc Text: |
.Using `ceph orch ls` command with the `--export` flag corrupts the cert/key files format
Previously, long multi-line strings like cert/key files format would be mangled when using `ceph orch ls` with the `--export` flag. Specifically, some newlines are stripped. As a result, if users re-apply a specification with a cert/key as they got it from `ceph orch ls` with `--export` provided, the cert/key will be unusable by the daemon.
As a workaround, to modify a specification while using `ceph orch ls` with `--export` to get the current contents, you need to modify the formatting of the cert/key file before re-applying the specification. It's recommended to use the format with a '|' and an indented string.
Example:
----
client_cert: |
-----BEGIN CERTIFICATE-----
MIIFCTCCAvGgAwIBAgIUO6yXXkNb1+1tJzxZDplvgKpwWkMwDQYJKoZIhvcNAQEL
BQAwFDESMBAGA1UEAwwJbXkuY2xpZW50MB4XDTI0MDcyMzA3NDI1N1oXDTM0MDcy
...
----
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | Bug | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Sunil Kumar Nagaraju
2024-07-24 15:44:54 UTC
|