Project

General

Profile

Backport #21059

jewel: ceph-disk should use stdin for 'config-key put' command

Added by Brad Hubbard 2 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Target version:
Release:
jewel


Related issues

Related to Ceph - Bug #20790: ceph logs shouldn't display dmcrypt key Closed 07/27/2017

History

#1 Updated by Brad Hubbard 2 months ago

  • Related to Bug #20790: ceph logs shouldn't display dmcrypt key added

#2 Updated by Nathan Cutler 2 months ago

  • Tracker changed from Bug to Backport
  • Description updated (diff)
  • Status changed from New to In Progress
  • Release jewel added

description

In jewel ceph-disk currently invokes the ceph 'config-key put' command in such a way that the raw key is exposed in the ceph logs (see #20790). This was resolved in kraken by allowing stdin/stdout for the ceph cli and changing ceph-disk to use the 'osd new' command.

#3 Updated by Nathan Cutler about 2 months ago

  • Status changed from In Progress to Resolved
  • Target version set to v10.2.10

Also available in: Atom PDF