From: bluikko <14869000+bluikko@users.noreply.github.com> Date: Fri, 19 Dec 2025 05:15:00 +0000 (+0700) Subject: Merge pull request #66675 from bluikko/wip-doc-rados-ops-health-checks-fixes2 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=2efd1619a206bc2b791a161aa60eb117805c3bc2;p=ceph.git Merge pull request #66675 from bluikko/wip-doc-rados-ops-health-checks-fixes2 doc/rados: Fix minor issues and improvements in health-checks.rst (2 of x) --- 2efd1619a206bc2b791a161aa60eb117805c3bc2 diff --cc doc/rados/operations/health-checks.rst index f65f4f8c56d,fbc1b328ef0..246ae7111ca --- a/doc/rados/operations/health-checks.rst +++ b/doc/rados/operations/health-checks.rst @@@ -257,29 -251,27 +257,29 @@@ indefinitely by running the following c AUTH_INSECURE_GLOBAL_ID_RECLAIM_ALLOWED _______________________________________ -Ceph is currently configured to allow clients that reconnect to monitors using +Ceph is currently configured to allow clients that reconnect to Monitors using an insecure process to reclaim their previous ``global_id``. Such reclaiming is -allowed because, by default, ``auth_allow_insecure_global_id_reclaim`` is set -to ``true``. It might be necessary to leave this setting enabled while existing -Ceph clients are upgraded to newer versions of Ceph that correctly and securely -reclaim their ``global_id``. +allowed because, by default, :confval:`auth_allow_insecure_global_id_reclaim` +is set to ``true``. It might be necessary to leave this setting enabled while +existing Ceph clients are upgraded to newer versions of Ceph that correctly and +securely reclaim their ``global_id``. If the ``AUTH_INSECURE_GLOBAL_ID_RECLAIM`` health check has not also been -raised and if the ``auth_expose_insecure_global_id_reclaim`` setting has not -been disabled (it is enabled by default), then there are currently no clients -connected that need to be upgraded. In that case, it is safe to disable -``insecure global_id reclaim`` by running the following command: +raised and if the :confval:`auth_expose_insecure_global_id_reclaim` setting has +not been disabled (it is enabled by default), then there are currently no +clients connected that need to be upgraded. In that case, it is safe to disable +insecure ``global_id`` reclaim by running the following command: - .. prompt:: bash $ + .. prompt:: bash # ceph config set mon auth_allow_insecure_global_id_reclaim false On the other hand, if there are still clients that need to be upgraded, then -this alert can be temporarily silenced by running the following command: +this alert can be +temporarily :ref:`silenced ` by running +the following command: - .. prompt:: bash $ + .. prompt:: bash # ceph health mute AUTH_INSECURE_GLOBAL_ID_RECLAIM_ALLOWED 1w # 1 week