summaryrefslogtreecommitdiff
path: root/Gobs Ceph Client Key Access.md
blob: d8f86c7c51fc4d445c686a1fac17c40b5b14a49d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
---
tags:
  - work
  - gobs
  - ceph
  - openstack
---
[[Overview of Ceph]]

Ceph credentials are typically stored in a keyring file under `/etc/ceph`. Nova has a a key there owned by nova/nova.
Instead of adding a new key I've added the `goba` user to the `nova` group and modified our hieradata to specify a mode which allows the group to read the keyring.

https://gitlab.group.one/groupvps/hieradata/-/merge_requests/499/diffs