Have you tried to modify by using ‚ceph auth caps…‘ instead of get-or-create?
Zitat von Jerry Buburuz <jbuburuz@xxxxxxxxxxxxxxx>:
Can I just:
ceph auth export mds.mynode -o mds.export
Add(editor) "caps: [mds] profile mds"
ceph auth import -i mds.export
THanks
jerry
Jerry Buburuz
ceph auth list:
mds.mynode
key: mykeyxxxxxxxxxx
caps: [mgr] profile mds
caps: [mon] profile mds
ceph auth get-or-create mds.mynode mon 'profile mds' mgr 'profile mds'
mds 'allow *' osd 'allow *'
error:
Error EINVAL: key for mds.mynode exists but cap mds does not match
I am following instructions on
https://docs.ceph.com/latest/cephfs/add-remove-mds
thanks
jerry
Xiubo Li
On 15/09/2022 03:09, Jerry Buburuz wrote:
Hello,
I am trying to add my first mds service on any node. I am unable to add
keyring to start mds service.
# $ sudo ceph auth get-or-create mds.mynode mon 'profile mds' mgr
'profile
mds' mds 'allow *' osd 'allow *'
Error ENINVAL: key for mds.mynode exists but cap mds does not match
It says the key mds.mynode already exists. What's the output of the
`ceph auth ls` ?
Thanks!
I tried this command on storage nodes, admin nodes(monitor) , same
error.
ceph mds stat
cephfs:0
This makes sense I don't have any mds services running yet.
I had no problem creating keyrings for other services like monitors and
mgr.
Thanks
jerry
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx