From 2266cc1e75a25ee46bbe8964af077b83f256a864 Mon Sep 17 00:00:00 2001 From: Michael Fritch Date: Fri, 11 Sep 2020 08:10:38 -0600 Subject: [PATCH] mgr/cephadm: disallow removing the mon keyring Signed-off-by: Michael Fritch --- src/pybind/mgr/cephadm/services/cephadmservice.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/pybind/mgr/cephadm/services/cephadmservice.py b/src/pybind/mgr/cephadm/services/cephadmservice.py index 97cd882775e0a..b19e5068e1d36 100644 --- a/src/pybind/mgr/cephadm/services/cephadmservice.py +++ b/src/pybind/mgr/cephadm/services/cephadmservice.py @@ -294,6 +294,10 @@ class CephService(CephadmService): daemon_id: str = daemon.daemon_id host: str = daemon.hostname + if daemon_id == 'mon': + # do not remove the mon keyring + return + entity = self.get_auth_entity(daemon_id, host=host) logger.info(f'Remove keyring: {entity}') -- 2.39.5