[pve-devel] ceph-create-keys hang

[Dietmar Maurer]

Using ceph jewel, after creating the first monitor with 'pveceph createmon':

Jun 13 06:10:17 elsa ceph-create-keys[10083]: Error EINVAL: key for client.admin
exists but cap mds does not match
Jun 13 06:10:17 elsa ceph-create-keys[10083]: INFO:ceph-create-keys:Cannot get
or create admin key
Jun 13 06:10:18 elsa ceph-create-keys[10083]: INFO:ceph-create-keys:Talking to
monitor...

# ceph auth list
installed auth entries:

client.admin
	key: AQCpKVlXAyx3ABAA1XKLxOC0IapDe/5GTWsQdw==
	auid: 0
	caps: [mds] allow
	caps: [mon] allow *
	caps: [osd] allow *



The code in ceph-create-keys reveals:

                returncode = subprocess.call(
                    args=[
                        'ceph',
                        '--cluster={cluster}'.format(cluster=cluster),
                        '--name=mon.',

                       '--keyring=/var/lib/ceph/mon/{cluster}-{mon_id}/keyring'.format(
                            cluster=cluster,
                            mon_id=mon_id,
                            ),
                        'auth',
                        'get-or-create',
                        'client.admin',
                        'mon', 'allow *',
                        'osd', 'allow *',
                        'mds', 'allow *',
                        ],
                    stdout=f,
                    )
 

So they use "mds 'allow *'" instead of "mds 'allow'".

I wonder how we can fix that for existing installations?