Disable global_id reclaim for Ceph mons in scenario001
As per [1], patched monitors raise the AUTH_INSECURE_GLOBAL_ID_RECLAIM_ALLOWED health alert if auth_allow_insecure_global_id_reclaim is enabled. This is ok for general deployments, but it's not required in CI deployments. Adding this option to the mon section using the CephConfigOverrides approach ensures the cluster stay in health_ok. [1] https://docs.ceph.com/en/latest/security/CVE-2021-20288/ Change-Id: Ib8d3f62d233ce5a42e9923547c08add6e5859cfb
This commit is contained in:
parent
b397b0acfd
commit
73c1d300df
|
@ -181,6 +181,7 @@ parameter_defaults:
|
|||
foo: bar
|
||||
mon:
|
||||
mon_warn_on_pool_no_redundancy: false
|
||||
mon_warn_on_insecure_global_id_reclaim_allowed: false
|
||||
NfsUrl: 127.0.0.1
|
||||
CephMsgrSecureMode: true
|
||||
CephAnsibleSkipClient: false
|
||||
|
|
Loading…
Reference in New Issue