ceph / ceph/ceph-chef

Ceph secrets are not used when specified by encrypted data bags

Open
#114 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Ruby
Stars
29
Forks
49
PR merge metrics
No merged PRs in 30d

Description

There are several cases where Ceph commands require a secret as input. For example, when populating the monitor daemon with the monitor map and keyring in the mon recipe, it requires the FSID secret:

`command lazy { "ceph-mon --mkfs -i #{node['hostname']} --fsid #{node['ceph']['fsid-secret']} --keyring #{keyring}" }`

This is fine until you decide to not store secrets as override attributes. If you put secrets in encrypted data bags, these node attributes are not populated and the deployment fails.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.