Feature #2880: chef: use get-or-create instead of get-or-create-key - devops - Ceph

Actions

Copy link

Feature #2880

closed

chef: use get-or-create instead of get-or-create-key

Added by Anonymous over 11 years ago. Updated almost 6 years ago.

Status:

Rejected

Priority:

High

Assignee:

Category:

chef

Target version:

% Done:

Source:

Tags:

CY2012

Backport:

Reviewed:

Affected Versions:

Pull request ID:

Description

ceph.git commit 4551808fa00b812fee6e0c196fd333eca0b06de9 adds "ceph auth get-or-create". Switch to using it in ceph-cookbooks.git recipes/mon.rb ruby_block "create client.admin keyring".

This way, we don't need two separate subprocesses (one to get key, another to write key into keyring file), we can just redirect output of the first command to a temp file and rename on success.

This also avoids the key being visible in ps.