Hide Forgot
Description of problem: While installing RGW node using ceph-ansible, admin keyring is not created in the RGW node. Version-Release number of selected component (if applicable): ceph-ansible-1.0.5-3.el7.noarch How reproducible: Always Steps to Reproduce: 1. Install a cluster along with RGW node using ceph-ansible 2. Run radosgw-admin command on RGW node after installation. Actual results: # radosgw-admin zone list 2016-04-25 13:23:28.341959 7ff4df27ea40 -1 auth: unable to find a keyring on /etc/ceph/ceph.client.admin.keyring,/etc/ceph/ceph.keyring,/etc/ceph/keyring,/etc/ceph/keyring.bin: (2) No such file or directory 2016-04-25 13:23:28.341985 7ff4df27ea40 -1 monclient(hunting): ERROR: missing keyring, cannot use cephx for authentication 2016-04-25 13:23:28.341989 7ff4df27ea40 0 librados: client.admin initialization error (2) No such file or directory couldn't init storage provider ls /etc/ceph ceph.conf rbdmap Expected results: ceph.client.admin.keyring should be present in /etc/ceph
We don't want the admin keyring on RGW nodes. This is not a good security practice.