Description of problem: When no pools using Ceph are defined (no services use Ceph as backend), and the pool list is empty in tripleo, a wrong osp_client_caps is generated [1], and it contains an empty value for the caps osd section. This results in a Ceph cluster which is not healthy (HEALTH_ERR is reported), because the resulting auth entry has invalid capabilities. [client.openstack] key = <the key> caps mgr = "allow *" caps mon = "profile rbd" caps osd = "" <= ERROR, this sections shouldn't be here [1] https://github.com/openstack/tripleo-ansible/blob/master/tripleo_ansible/roles/tripleo_ceph_work_dir/tasks/build_keys.yml#L21-L32 Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Red Hat OpenStack Platform 16.1.6 (tripleo-ansible) security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:2119