not possible to change encryption secrets storage config post-install

[Edward Hope-Morley]

When relating ceph-osd with the vault charm I am getting a module import error:

ModuleNotFoundError: No module named 'hvac'

more detail: https://paste.ubuntu.com/p/C6hdYgrYwh/

I am deploying on Bionic and have initialised my vault as per [1] with juju status showing that vault is happy [2]

[1] https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/latest/app-vault.html
[2] https://paste.ubuntu.com/p/5WpscRc8db/

[Edward Hope-Morley (hopem)]

Ok i see what's happened, i forgot to set the ceph-osd charm config explained in [1]. One thing tho is that it appears to be the case the charm will only attempt to install vaultlocker on install() i.e. if you do what i did and want to change the config post-install the charm does not appear to let you so you can't unbreak the unit.

[1] https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/latest/app-encryption-at-rest.html

[Chris MacNaughton (chris.macnaughton)]

the charm should ensure vaultlocker is available - https://github.com/openstack/charm-ceph-osd/blob/master/hooks/ceph_hooks.py#L409-L412