Description of problem: after upgrading the first MONs member of a Luminous cluster to latest Nautilus container image makes the Nautilus client "ceph -s" command fail and return "[errno 1] error connecting to the cluster" despite the ceph cluster itself appearingly quorate and in good health attaching ceph.conf ; quorum_status gathered via ceph admin socket and strace output of "ceph -s" Version-Release number of selected component (if applicable): ceph-common-14.2.8-53.el8cp.x86_64 How reproducible: always Steps to Reproduce: upgrade first mon instance to rhcs4 container image (using ceph-ansible rolling_update.yml) Actual results: "ceph -s" will exit with "[errno 1] error connecting to the cluster"
Please specify the severity of this bug. Severity is defined here: https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity.
Created attachment 1685806 [details] ceph.conf
Created attachment 1685807 [details] quorum_status.out
Created attachment 1685808 [details] strace_ceph_s.out
It looks like we provide to ceph-ansible the correct admin_secret but it is ignored; attaching inventory with full vars, playbook log and ceph.client.admin.keyring Version of ceph-ansible is: ceph-ansible-3.2.40-1.el7cp.noarch
Created attachment 1686245 [details] the inventory file, including all vars set for the run
Created attachment 1686246 [details] ceph.client.admin.keyring
Created attachment 1686247 [details] playbook run logs
ceph-ansible will generate a random secret for client.admin when none is given but does not support replacing the client.admin secret considering we have in the field osp13 deployments with client.admin secret created by ceph-ansible which we can't replace on upgrade, the less impactful solution to this issue seems to be to drop support for CephAdminKey
verified
If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text. If this bug does not require doc text, please set the 'requires_doc_text' flag to '-'.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:3148