Have you tried to modify by using ‚ceph auth caps…‘ instead of get-or-create?

Zitat von Jerry Buburuz <[email protected]>:

Can I just:

ceph auth export mds.mynode -o mds.export

Add(editor) "caps: [mds] profile mds"

ceph auth import -i mds.export

THanks
jerry

Jerry Buburuz

ceph auth list:

mds.mynode
        key: mykeyxxxxxxxxxx
        caps: [mgr] profile mds
        caps: [mon] profile mds


ceph auth  get-or-create mds.mynode mon 'profile mds' mgr 'profile mds'
mds 'allow *' osd 'allow *'

error:
Error EINVAL: key for mds.mynode exists but cap mds does not match

I am following instructions on
https://docs.ceph.com/latest/cephfs/add-remove-mds

thanks
jerry

Xiubo Li

On 15/09/2022 03:09, Jerry Buburuz wrote:
Hello,

I am trying to add my first mds service on any node. I am unable to add
keyring to start mds service.

# $ sudo ceph auth get-or-create mds.mynode mon 'profile mds' mgr
'profile
mds' mds 'allow *' osd 'allow *'

Error ENINVAL: key for mds.mynode exists but cap mds does not match

It says the key mds.mynode already exists. What's the output of the
`ceph auth ls` ?

Thanks!


I tried this command on storage nodes, admin nodes(monitor) , same
error.

ceph mds stat
cephfs:0

This makes sense I don't have any mds services running yet.

I had no problem creating keyrings for other services like monitors and
mgr.

Thanks
jerry





_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]


_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]






_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]



_______________________________________________
ceph-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to