From 75f4765f2ffe795dba85540b8aa1675ba9de28e4 Mon Sep 17 00:00:00 2001 From: Kefu Chai Date: Mon, 10 Feb 2020 17:36:04 +0800 Subject: [PATCH] doc: update mondb recovery script to note that we also need to add mgr's key to monitor's keyring Signed-off-by: Kefu Chai --- doc/rados/troubleshooting/troubleshooting-mon.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/doc/rados/troubleshooting/troubleshooting-mon.rst b/doc/rados/troubleshooting/troubleshooting-mon.rst index e8d32c4cae95e..2f4fe23f13b31 100644 --- a/doc/rados/troubleshooting/troubleshooting-mon.rst +++ b/doc/rados/troubleshooting/troubleshooting-mon.rst @@ -439,6 +439,12 @@ information stored in OSDs.:: --cap mon 'allow *' ceph-authtool /path/to/admin.keyring -n client.admin \ --cap mon 'allow *' --cap osd 'allow *' --cap mds 'allow *' + # add one or more ceph-mgr's key to the keyring. in this case, an encoded key + # for mgr.x is added, you can find the encoded key in + # /etc/ceph/${cluster}.${mgr_name}.keyring on the machine where ceph-mgr is + # deployed + ceph-authtool /path/to/admin.keyring --add-key 'AQDN8kBe9PLWARAAZwxXMr+n85SBYbSlLcZnMA==' -n mgr.x \ + --cap mon 'allow profile mgr' --cap osd 'allow *' --cap mds 'allow *' # if your monitors' ids are not single characters like 'a', 'b', 'c', please # specify them in the command line by passing them as arguments of the "--mon-ids" # option. if you are not sure, please check your ceph.conf to see if there is any -- 2.39.5