---
tags:
  - work
  - gobs
  - ceph
  - openstack
---
[[Overview of Ceph]]

Ceph credentials are typically stored in a keyring file under `/etc/ceph`. Nova has a a key there owned by nova/nova.
Instead of adding a new key I've added the `goba` user to the `nova` group and modified our hieradata to specify a mode which allows the group to read the keyring.

https://gitlab.group.one/groupvps/hieradata/-/merge_requests/499/diffs