Bug 1330835 - admin keyring file missing on RGW node
Summary: admin keyring file missing on RGW node
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Storage Console
Classification: Red Hat
Component: ceph-installer
Version: 2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: 3
Assignee: Christina Meno
QA Contact: ceph-qe-bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-27 06:21 UTC by shilpa
Modified: 2017-03-02 16:57 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-03-02 16:57:07 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description shilpa 2016-04-27 06:21:15 UTC
Description of problem:
While installing RGW node using ceph-ansible, admin keyring is not created in the RGW node.


Version-Release number of selected component (if applicable):
ceph-ansible-1.0.5-3.el7.noarch

How reproducible:
Always

Steps to Reproduce:
1. Install a cluster along with RGW node using ceph-ansible
2. Run radosgw-admin command on RGW node after installation.

Actual results:

# radosgw-admin zone list
2016-04-25 13:23:28.341959 7ff4df27ea40 -1 auth: unable to find a keyring on /etc/ceph/ceph.client.admin.keyring,/etc/ceph/ceph.keyring,/etc/ceph/keyring,/etc/ceph/keyring.bin: (2) No such file or directory
2016-04-25 13:23:28.341985 7ff4df27ea40 -1 monclient(hunting): ERROR: missing keyring, cannot use cephx for authentication
2016-04-25 13:23:28.341989 7ff4df27ea40  0 librados: client.admin initialization error (2) No such file or directory
couldn't init storage provider

ls /etc/ceph
ceph.conf  rbdmap


Expected results:

ceph.client.admin.keyring should be present in /etc/ceph

Comment 4 Ken Dreyer (Red Hat) 2017-03-02 16:57:07 UTC
We don't want the admin keyring on RGW nodes. This is not a good security practice.


Note You need to log in before you can comment on or make changes to this bug.