Note
Before proceeding with the manual steps below, verify that you have performed the steps described in Apply maintenance updates.
Fixed the issue causing failure of the Ceph cluster deployment during the
deployment of Ceph OSDs due to unnecessary escape characters in the keyring
caps. Added the capability to use the pre-generated admin and
radosgw keyrings during the Ceph cluster deployment.
To apply the issue resolution:
Open your Git project repository with the Reclass model on the cluster level.
In classes/cluster/cluster_name/ceph/common.yml, remove the backslash
characters \ from the caps definitions. For example:
ceph:
common:
public_network: ${_param:ceph_public_network}
cluster_network: ${_param:ceph_cluster_network}
keyring:
glance:
name: ${_param:glance_storage_user}
caps:
mon: 'allow r, allow command "osd blacklist"'
osd: "profile rbd pool=images"
cinder:
name: ${_param:cinder_storage_user}
caps:
mon: 'allow r, allow command "osd blacklist"'
osd: "profile rbd pool=volumes, profile rbd-read-only pool=images, profile rbd pool=${_param:cinder_ceph_backup_pool}"
nova:
name: ${_param:nova_storage_user}
caps:
mon: 'allow r, allow command "osd blacklist"'
osd: "profile rbd pool=vms, profile rbd-read-only pool=images"
Fixed the issue with the test_create_object_with_expect_continue Tempest
test failing on a new MCP cluster with the ssl.SSLError: certificate verify
failed error message due to a misconfiguration of the RADOS Gateway Swift and
S3 endpoint.
To apply the issue resolution:
Log in to the Salt Master node.
Apply the nginx state on the prx nodes:
salt -C "I@nginx:server:site:ceph_radosgw" state.sls nginx