2222355d25
Some ceph cluster commands require this caps Change-Id: Idfa19667f1fb83f2cb89712c594513188d859359 Closes-Bug: #1750967
45 lines
1.9 KiB
Bash
45 lines
1.9 KiB
Bash
#!/bin/bash
|
|
|
|
# Setup common paths
|
|
KEYRING_ADMIN="/etc/ceph/ceph.client.admin.keyring"
|
|
KEYRING_MON="/etc/ceph/ceph.client.mon.keyring"
|
|
KEYRING_RGW="/etc/ceph/ceph.client.radosgw.keyring"
|
|
MONMAP="/etc/ceph/ceph.monmap"
|
|
MON_DIR="/var/lib/ceph/mon/ceph-${HOSTNAME}"
|
|
|
|
if [[ ! -d "/var/log/kolla/ceph" ]]; then
|
|
mkdir -p /var/log/kolla/ceph
|
|
fi
|
|
if [[ $(stat -c %a /var/log/kolla/ceph) != "755" ]]; then
|
|
chmod 755 /var/log/kolla/ceph
|
|
fi
|
|
|
|
# Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases
|
|
# of the KOLLA_BOOTSTRAP variable being set, including empty.
|
|
if [[ "${!KOLLA_BOOTSTRAP[@]}" ]]; then
|
|
# Lookup our fsid from the ceph.conf
|
|
FSID=$(awk '/^fsid/ {print $3; exit}' /etc/ceph/ceph.conf)
|
|
|
|
# Generating initial keyrings and monmap
|
|
ceph-authtool --create-keyring "${KEYRING_MON}" --gen-key -n mon. --cap mon 'allow *'
|
|
ceph-authtool --create-keyring "${KEYRING_ADMIN}" --gen-key -n client.admin --set-uid=0 --cap mon 'allow *' --cap osd 'allow *' --cap mds 'allow' --cap mgr 'allow *'
|
|
ceph-authtool --create-keyring "${KEYRING_RGW}" --gen-key -n client.radosgw.gateway --set-uid=0 --cap osd 'allow rwx' --cap mon 'allow rwx'
|
|
ceph-authtool "${KEYRING_MON}" --import-keyring "${KEYRING_ADMIN}"
|
|
ceph-authtool "${KEYRING_MON}" --import-keyring "${KEYRING_RGW}"
|
|
monmaptool --create --add "${HOSTNAME}" "${MON_IP}" --fsid "${FSID}" "${MONMAP}"
|
|
|
|
exit 0
|
|
fi
|
|
|
|
# This section runs on every mon that does not have a keyring already.
|
|
if [[ ! -e "${MON_DIR}/keyring" ]]; then
|
|
KEYRING_TMP="/tmp/ceph.mon.keyring"
|
|
|
|
# Generate keyring for current monitor
|
|
ceph-authtool --create-keyring "${KEYRING_TMP}" --import-keyring "${KEYRING_ADMIN}"
|
|
ceph-authtool "${KEYRING_TMP}" --import-keyring "${KEYRING_MON}"
|
|
mkdir -p "${MON_DIR}"
|
|
ceph-mon --mkfs -i "${HOSTNAME}" --monmap "${MONMAP}" --keyring "${KEYRING_TMP}"
|
|
rm "${KEYRING_TMP}"
|
|
fi
|