Ceph secrets are not used when specified by encrypted data bags
Open
- Dominant language
- Ruby
- Stars
- 29
- Forks
- 49
- PR merge metrics
- No merged PRs in 30d
Description
There are several cases where Ceph commands require a secret as input. For example, when populating the monitor daemon with the monitor map and keyring in the mon recipe, it requires the FSID secret:
`command lazy { "ceph-mon --mkfs -i #{node['hostname']} --fsid #{node['ceph']['fsid-secret']} --keyring #{keyring}" }`
This is fine until you decide to not store secrets as override attributes. If you put secrets in encrypted data bags, these node attributes are not populated and the deployment fails.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.