OSDMonitor: return failure for 'osd lost' without safety switch

If user doesn't supply --yes-i-really-mean-it, fail the operation

Signed-off-by: Dan Mick <dan.mick@inktank.com>

diff --git a/src/mon/OSDMonitor.cc b/src/mon/OSDMonitor.cc
index aaaf66183547e91732c023f63464b7eb49a1db02..7e76ea271c40dd95f8c8ff546d5ed5d2545a4f9d 100644 (file)
--- a/src/mon/OSDMonitor.cc
+++ b/src/mon/OSDMonitor.cc
@@ -3163,6 +3163,8 @@ bool OSDMonitor::prepare_command(MMonCommand *m)
     if (!cmd_getval(g_ceph_context, cmdmap, "sure", sure) || sure != "--yes-i-really-mean-it") {
       ss << "are you SURE?  this might mean real, permanent data loss.  pass "
            "--yes-i-really-mean-it if you really do.";
+      err = -EPERM;
+      goto reply;
     } else if (!osdmap.exists(id) || !osdmap.is_down(id)) {
       ss << "osd." << id << " is not down or doesn't exist";
     } else {