Bug 1488999 - [ceph-ansible] [ceph-container] : admin keyring getting copied to mds node even if copy_admin_key is set to false
Summary: [ceph-ansible] [ceph-container] : admin keyring getting copied to mds node ev...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Ceph-Ansible
Version: 3.0
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: rc
: 3.0
Assignee: Guillaume Abrioux
QA Contact: Vasishta
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-09-06 14:55 UTC by Vasishta
Modified: 2017-12-05 23:42 UTC (History)
11 users (show)

Fixed In Version: RHEL: ceph-ansible-3.0.0-0.1.rc14.el7cp Ubuntu: ceph-ansible_3.0.0~rc14-2redhat1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-12-05 23:42:05 UTC
Embargoed:

Attachments (Terms of Use)
File contains contents ansible-playbook log, inventory file snippet, osds.yml contents (1.76 MB, text/plain)
2017-09-26 11:15 UTC, Vasishta 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Github ceph ceph-ansible pull 1761 0 None closed docker: split the task 'copy ceph configs&keys' 2020-01-24 10:05:00 UTC
Github ceph ceph-ansible pull 1968 0 None closed refact MDS role 2020-01-24 10:05:00 UTC
Red Hat Product Errata RHBA-2017:3387 0 normal SHIPPED_LIVE Red Hat Ceph Storage 3.0 bug fix and enhancement update 2017-12-06 03:03:45 UTC

Description Vasishta 2017-09-06 14:55:58 UTC 
Description of problem:
Client admin keyring file is getting copied to mds node even if copy_admin_key in mdss.yml is set to false

Version-Release number of selected component (if applicable):
ceph-ansible-3.0.0-0.1.rc4.el7cp.noarch

How reproducible:
Always (2/2)

Steps to Reproduce:
1. Configure ceph-ansible to setup a cluster with one mds node.
2. Run ansible-playbook site-docker.yml
3. Observe admin keyring copied into /etc/ceph directory of mds node

Actual results:
Client admin keyring file is getting copied to mds node even if copy_admin_key in mdss.yml is set to false

Expected results:
Client admin keyring file must not be copied to mds node even if copy_admin_key in mdss.yml is set to false

Additional info:
$ cat group_vars/mdss.yml | grep admin
------------------------
#copy_admin_key: false
Comment 5 Vasishta 2017-09-26 11:15:30 UTC 
Created attachment 1331002 [details]
File contains contents ansible-playbook log, inventory file snippet, osds.yml contents

Hi Guillaume,

I faced this issue even on OSD nodes along with mds nodes.
Moving back to ASSIGNED state.
 
$ rpm -qa|grep ceph-ansible
ceph-ansible-3.0.0-0.1.rc11.el7cp.noarch

Regards,
Vasishta
Comment 6 Guillaume Abrioux 2017-10-02 13:19:48 UTC 
Fixed upstream :
https://github.com/ceph/ceph-ansible/commit/62770cd7de0f47cc0afc7eab2dcdadb5b1b356d2
Comment 7 Ken Dreyer (Red Hat) 2017-10-02 15:40:37 UTC 
Guillaume or Sébastien, would you please tag a new ceph-ansible version upstream with this change so we know to pull it downstream?
Comment 8 Guillaume Abrioux 2017-10-02 15:43:58 UTC 
Ken,

Sebastien has tagged v3.0.0rc14 upstream with this change.
Comment 12 Vasishta 2017-10-11 16:06:03 UTC 
Working fine, Moving to VERIFIED state.
(ceph-ansible-3.0.0-0.1.rc19.el7cp.noarch)
Comment 15 errata-xmlrpc 2017-12-05 23:42:05 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:3387
Note You need to log in before you can comment on or make changes to this bug.