OK so as of Luminous release it would appear that the default bootstrap-osd key profile gets permissions to store/retrive dm-crypt keys from the ceph-mon cluster:
https://github.com/ceph/ceph/commit/88ce18da901b7e9aad621d22839fd28de0af9c51
OK so as of Luminous release it would appear that the default bootstrap-osd key profile gets permissions to store/retrive dm-crypt keys from the ceph-mon cluster:
https:/ /github. com/ceph/ ceph/commit/ 88ce18da901b7e9 aad621d22839fd2 8de0af9c51