[ceph-users] Re: adding mds service , unable to create keyring for mds

[Jerry Buburuz]

FIXED!

Interesting:

ceph auth caps mds.mynode mon 'profile mds' mgr 'profile mds'
mds 'allow *' osd 'allow *'

ouput:
updated caps for mds.admin-node-02

Worked!

ceph auth list

mds.mynode:
   key:
   caps: [mds] allow
   caps: [mgr] profile mds
   caps: [mon] profile mds
   caps: [osd] allow *


Thanks Eugen!

Thank you Xiubo Li! you got me going down the right road.

I am not sure why "get-or-create" did not work. I am not sure if this is
part of the cause. I created a cephfs manually before starting mds.

Currently:

ceph mds stat
cephfs:0/0 1 up:standby, 1 damaged

But I have a mds UP!

thanks
jerry

Eugen Block
> Have you tried to modify by using ‚ceph auth caps…‘ instead of
get-or-create?
> Zitat von Jerry Buburuz <jbubu...@sce.carleton.ca>:
>> Can I just:
>> ceph auth export mds.mynode -o mds.export
>> Add(editor) "caps: [mds] profile mds"
>> ceph auth import -i mds.export
>> THanks
>> jerry
>> Jerry Buburuz
>>> ceph auth list:
>>> mds.mynode
>>>         key: mykeyxxxxxxxxxx
>>>         caps: [mgr] profile mds
>>>         caps: [mon] profile mds
>>> ceph auth  get-or-create mds.mynode mon 'profile mds' mgr 'profile
mds'
>>> mds 'allow *' osd 'allow *'
>>> error:
>>> Error EINVAL: key for mds.mynode exists but cap mds does not match I
am following instructions on
>>> https://docs.ceph.com/latest/cephfs/add-remove-mds
>>> thanks
>>> jerry
>>> Xiubo Li
>>>> On 15/09/2022 03:09, Jerry Buburuz wrote:
>>>>> Hello,
>>>>> I am trying to add my first mds service on any node. I am unable to add
>>>>> keyring to start mds service.
>>>>> # $ sudo ceph auth get-or-create mds.mynode mon 'profile mds' mgr
'profile
>>>>> mds' mds 'allow *' osd 'allow *'
>>>>> Error ENINVAL: key for mds.mynode exists but cap mds does not match
>>>> It says the key mds.mynode already exists. What's the output of the
`ceph auth ls` ?
>>>> Thanks!
>>>>> I tried this command on storage nodes, admin nodes(monitor) , same
error.
>>>>> ceph mds stat
>>>>> cephfs:0
>>>>> This makes sense I don't have any mds services running yet.
>>>>> I had no problem creating keyrings for other services like monitors and
>>>>> mgr.
>>>>> Thanks
>>>>> jerry
>>>>> _______________________________________________
>>>>> ceph-users mailing list -- ceph-users@ceph.io
>>>>> To unsubscribe send an email to ceph-users-le...@ceph.io
>>>> _______________________________________________
>>>> ceph-users mailing list -- ceph-users@ceph.io
>>>> To unsubscribe send an email to ceph-users-le...@ceph.io
>> _______________________________________________
>> ceph-users mailing list -- ceph-users@ceph.io
>> To unsubscribe send an email to ceph-users-le...@ceph.io
> _______________________________________________
> ceph-users mailing list -- ceph-users@ceph.io
> To unsubscribe send an email to ceph-users-le...@ceph.io




_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io