Bug 2132582
| Summary: | pcs booth - consider adding support for enable-authfile | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Tomas Jelinek <tojeline> |
| Component: | pcs | Assignee: | Ondrej Mular <omular> |
| Status: | CLOSED ERRATA | QA Contact: | cluster-qe <cluster-qe> |
| Severity: | high | Docs Contact: | Steven J. Levine <slevine> |
| Priority: | high | ||
| Version: | 8.0 | CC: | bstinson, cluster-maint, cluster-qe, idevat, jfriesse, jwboyer, mlisik, mmazoure, mpospisi, nhostako, omular, slevine, svalasti, tojeline |
| Target Milestone: | rc | Keywords: | Triaged |
| Target Release: | 8.8 | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | pcs-0.10.15-1.el8 | Doc Type: | Enhancement |
| Doc Text: |
.New `enable-authfile` Booth configuration option
When you create a Booth configuration to use the Booth ticket manager in a cluster configuration, the `pcs booth setup` command now enables the new `enable-authfile` Booth configuration option by default. You can enable this option on an existing cluster with the `pcs booth enable-authfile` command. Additionally, the `pcs status` and `pcs booth status` commands now display warnings when they detect a possible `enable-authfile` misconfiguration.
|
Story Points: | --- |
| Clone Of: | 2116295 | Environment: | |
| Last Closed: | 2023-05-16 08:12:42 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Tomas Jelinek
2022-10-06 08:15:26 UTC
What we want to do:
* Add 'enable-authfile: yes' to newly created booth config ('pcs booth setup' command)
* Print a warning in 'pcs status', if booth is enabled, authfile is present, and 'enable-authfile: yes' is missing in booth config
* Add a command for changing 'enable-authfile' so that it can be enabled in existing configuration
Upstream patch: https://github.com/ClusterLabs/pcs/commit/9b5f1410efe6ae5cd033bb0bcd28e76b76123ac9 Option `enable-authfile = yes` is always added to booth configuration for new booth setups when using `pcs booth setup` command New commands for managing `enable-authfile` booth option: - pcs booth enable-authfile - pcs booth clean-enable-authfile Incorrect usage of `enable-authfile` option warnings are displayed when running `pcs status` and `pcs booth status`. Test: [root@rhel87-devel1 pcs]# pcs booth setup sites rhel87-devel1 rhel87-devel2 arbitrators rhel87-devel3 [root@rhel87-devel1 pcs]# pcs booth config | grep authfile authfile = /etc/booth/booth.key enable-authfile = yes DevTestResults: [root@r08-08-a ~]# rpm -q pcs pcs-0.10.15-1.el8.x86_64 [root@r08-08-a ~]# pcs booth setup sites r08-08-a.vm r08-08-b.vm arbitrators r08-08-c.vm [root@r08-08-a ~]# pcs booth config | grep authfile authfile = /etc/booth/booth.key enable-authfile = yes Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (pcs bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:2738 |