ceph-salt

ceph-salt copied to clipboard

Add support to `ceph-salt export` to write to a file directly

1

Currently, `ceph-salt export` dumps the content of the configuration to STDOUT by default and the user needs to redirect the output into a file themselves. Depending on the user's `umask`,...

LenzGr

Give users the option of not exporting the SSH private key

2

There are two use cases for "ceph-salt export". The first use case is: "I want to export the configuration so I can **import** it later". The second is: "I want...

smithfarm

Do we need to do something about these tox warnings?

1

``` =============================== warnings summary =============================== ceph_salt/config_shell.py:1199 /home/travis/build/ceph/ceph-salt/ceph_salt/config_shell.py:1199: DeprecationWarning: invalid escape sequence \+ var = QuotedString('"') | QuotedString("'") | Word(alphanums + '?;&*$!#,=_\+/.()~@:-%[]') ceph_salt/config_shell.py:1201 /home/travis/build/ceph/ceph-salt/ceph_salt/config_shell.py:1201: DeprecationWarning: invalid escape sequence \- keyword =...

smithfarm

(Please correct me if I'm wrong about any of this!) When the user leaves `/cephadm_bootstrap/mon_ip` unset, ceph-salt's current behavior is to randomly choose one of the IP addresses of the...

smithfarm

What if a user has some other (non-SES-related) production AppArmor profiles on their nodes? Won't ceph-salt apply interfere with those?

smithfarm

Add "Apparmor" option group to config shell

12

ceph-bootstrap -- Add a `Apparmor` option group to the config shell. This group should be able to configure all options required by [ceph-salt-formula:apparmor](https://github.com/SUSE/ceph-salt-formula/blob/master/states/apparmor.sls) state. ceph-salt-formula -- Currently the apparmor state...

rjfd

Do we really need ceph-salt grains?

1

(Relying on the pillar is more secure because only the master node can set it) For ceph-salt minions targetting, we can use pillar: ``` salt -I ceph-salt:minions state.apply ``` instead...

ricardoasmarques

When `ceph-salt-formula` is installed, a `pillar.example` file is created, but this example is outdated/incomplete so it needs to be updated: ``` master:~ # cat /usr/share/salt-formulas/metadata/ceph-salt/pillar.example ceph-salt: minions: - - #...

ricardoasmarques

Thanks for implementing #404 - this is a very useful feature. I wonder if it would make sense to have an option for the administrator to issue a `poweroff` command...

LenzGr

What if humans want to use the "cephadm" user to administer their Ceph cluster?

8

At present, we know that: 1. mgr/cephadm (the "cephadm orchestrator"), running on a MGR node, uses SSH to run commands on other cluster nodes managed by it 2. ceph-salt is...

smithfarm