in luminous ceph admin client requires extra caps

Bug #1750967 reported by Jeffrey Zhang
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla
Fix Released
High
Jeffrey Zhang
kolla-ansible
Fix Released
Critical
Jeffrey Zhang
Queens
Fix Released
Critical
Unassigned

Bug Description

based on the official doc[1], “mgr allow *” is required for admin client

[1] http://docs.ceph.com/docs/master/mgr/administrator/#client-authentication

Changed in kolla:
assignee: nobody → Jeffrey Zhang (jeffrey4l)
Changed in kolla-ansible:
assignee: nobody → Jeffrey Zhang (jeffrey4l)
Changed in kolla:
importance: Undecided → High
Changed in kolla-ansible:
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla (master)

Fix proposed to branch: master
Review: https://review.openstack.org/546891

Changed in kolla:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.openstack.org/547012

Changed in kolla-ansible:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (master)

Reviewed: https://review.openstack.org/546891
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=2222355d25ca56b69057d20c9d4d3ccc2750440f
Submitter: Zuul
Branch: master

commit 2222355d25ca56b69057d20c9d4d3ccc2750440f
Author: Jeffrey Zhang <email address hidden>
Date: Thu Feb 22 14:48:36 2018 +0800

    Add cap mgr 'allow *' for ceph admin key

    Some ceph cluster commands require this caps

    Change-Id: Idfa19667f1fb83f2cb89712c594513188d859359
    Closes-Bug: #1750967

Changed in kolla:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 6.0.0.0rc1

This issue was fixed in the openstack/kolla 6.0.0.0rc1 release candidate.

Changed in kolla-ansible:
milestone: none → rocky-1
importance: High → Critical
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.openstack.org/547012
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=20c5e8fe13ae57ac59c8b536830ee4b133f75d52
Submitter: Zuul
Branch: master

commit 20c5e8fe13ae57ac59c8b536830ee4b133f75d52
Author: Jeffrey Zhang <email address hidden>
Date: Thu Feb 22 22:42:47 2018 +0800

    Update ceph client.admin caps during upgrade

    When upgrade from ceph Jewel to ceph luminous, the client.admin caps
    should add `mgr 'allow *'` caps

    Change-Id: Ia4cb7a59d4cf215a1dce1efe31e00f1401e0b753
    Closes-Bug: #1750967

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/queens)

Reviewed: https://review.openstack.org/558036
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=4fbb2571d31eeb13f0103bdb54f906cc9477fda6
Submitter: Zuul
Branch: stable/queens

commit 4fbb2571d31eeb13f0103bdb54f906cc9477fda6
Author: Jeffrey Zhang <email address hidden>
Date: Thu Feb 22 22:42:47 2018 +0800

    Update ceph client.admin caps during upgrade

    When upgrade from ceph Jewel to ceph luminous, the client.admin caps
    should add `mgr 'allow *'` caps

    Change-Id: Ia4cb7a59d4cf215a1dce1efe31e00f1401e0b753
    Closes-Bug: #1750967
    (cherry picked from commit 20c5e8fe13ae57ac59c8b536830ee4b133f75d52)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 7.0.0.0b2

This issue was fixed in the openstack/kolla-ansible 7.0.0.0b2 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 6.1.0

This issue was fixed in the openstack/kolla-ansible 6.1.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.