Browse Source

Disable global_id reclaim for Ceph mons in scenario001

As per [1], patched monitors raise the AUTH_INSECURE_GLOBAL_ID_RECLAIM_ALLOWED
health alert if auth_allow_insecure_global_id_reclaim is enabled.
This is ok for general deployments, but it's not required in CI deployments.
Adding this option to the mon section using the CephConfigOverrides
approach ensures the cluster stay in health_ok.

[1] https://docs.ceph.com/en/latest/security/CVE-2021-20288/

Change-Id: Ib8d3f62d233ce5a42e9923547c08add6e5859cfb
changes/94/787694/2
Francesco Pantano 9 months ago
parent
commit
73c1d300df
  1. 1
      ci/environments/scenario001-standalone.yaml

1
ci/environments/scenario001-standalone.yaml

@ -181,6 +181,7 @@ parameter_defaults:
foo: bar
mon:
mon_warn_on_pool_no_redundancy: false
mon_warn_on_insecure_global_id_reclaim_allowed: false
NfsUrl: 127.0.0.1
CephMsgrSecureMode: true
CephAnsibleSkipClient: false

Loading…
Cancel
Save