Project

General

Profile

Actions

Bug #51295

closed

When fsname = k8s cephfs is specified, an error is displayed:"HEALTH_ERR 1 auth entities have invalid capabilities,[ERR] AUTH_BAD_CAPS: 1 auth entities have invalid capabilities, client.ceph-k8s-cephfs-admin mds capability parse failed, stopped at 'fs"

Added by lyd dragon almost 3 years ago. Updated over 2 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
Community (user)
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
Labels (FS):
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

When fsname = k8s cephfs is specified, an error is displayed:
  1. ceph health detail
    HEALTH_ERR 1 auth entities have invalid capabilities
    [ERR] AUTH_BAD_CAPS: 1 auth entities have invalid capabilities
    client.ceph-k8s-cephfs-admin mds capability parse failed, stopped at 'fsname=k8s-cephfs' of 'allow rwp fsname=k8s-cephfs'
  1. ceph status
    cluster:
    id: d04fb1fc-d1ae-11eb-9e27-3260a6f1d946
    health: HEALTH_ERR
    1 auth entities have invalid capabilities
  1. ceph fs ls
    name: k8s-cephfs, metadata pool: cephfs.k8s-cephfs.meta, data pools: [cephfs.k8s-cephfs.data ]
  1. ceph version
    ceph version 15.2.13 (c44bc49e7a57a87d84dfff2a077a2058aa2172e2) octopus (stable)
  1. ceph auth get client.ceph-k8s-cephfs-admin
    exported keyring for client.ceph-k8s-cephfs-admin
    [client.ceph-k8s-cephfs-admin]
    key = AQA8SM9gtLhkNRAAhX8lYMJzgk2KkYTUpmYxcg==
    caps mds = "allow rwp fsname=k8s-cephfs"
    caps mgr = "allow rw"
    caps mon = "allow r"
    caps osd = "allow rw tag cephfs *=*"

I found that the description in the document can specify fsname. url:https://docs.ceph.com/en/latest/cephfs/client-auth/
Why are errors displayed here?

Actions #1

Updated by Sebastian Wagner over 2 years ago

  • Project changed from Ceph to CephFS
  • Category deleted (cephx)
Actions #2

Updated by Patrick Donnelly over 2 years ago

  • Status changed from New to Rejected

That auth credential is not valid for Octopus. You should upgrade to Pacific.

Actions

Also available in: Atom PDF