79 lines
2.2 KiB
ReStructuredText
79 lines
2.2 KiB
ReStructuredText
Ceph Kubernetes Secret Generation
|
|
=================================
|
|
|
|
This script will generate ceph keyrings and configs as Kubernetes
|
|
secrets.
|
|
|
|
Sigil is required for template handling and must be installed in system
|
|
``PATH``. Instructions can be found`here
|
|
<https://github.com/gliderlabs/sigil>`__
|
|
|
|
The following functions are provided:
|
|
|
|
Generate raw FSID (can be used for other functions)
|
|
---------------------------------------------------
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh fsid
|
|
|
|
Generate raw ceph.conf (For verification)
|
|
-----------------------------------------
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh ceph-conf-raw <fsid> "overridekey=value"
|
|
|
|
Take a look at ``ceph/ceph.conf.tmpl`` for the default values
|
|
|
|
Generate encoded ceph.conf secret
|
|
---------------------------------
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh ceph-conf <fsid> "overridekey=value"
|
|
|
|
Generate encoded admin keyring secret
|
|
-------------------------------------
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh admin-keyring
|
|
|
|
Generate encoded mon keyring secret
|
|
-----------------------------------
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh mon-keyring
|
|
|
|
Generate a combined secret
|
|
--------------------------
|
|
|
|
Contains ceph.conf, admin keyring and mon keyring. Useful for generating
|
|
the ``/etc/ceph`` directory
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh combined-conf
|
|
|
|
Generate encoded boostrap keyring secret
|
|
----------------------------------------
|
|
|
|
.. code:: bash
|
|
|
|
./generate_secrets.sh bootstrap-keyring <osd|mds|rgw>
|
|
|
|
Kubernetes workflow
|
|
===================
|
|
|
|
.. code:: bash
|
|
|
|
./generator/generate_secrets.sh all `./generate_secrets.sh fsid`
|
|
|
|
kubectl create secret generic ceph-conf-combined --from-file=ceph.conf --from-file=ceph.client.admin.keyring --from-file=ceph.mon.keyring --namespace=ceph
|
|
kubectl create secret generic ceph-bootstrap-rgw-keyring --from-file=ceph.keyring=ceph.rgw.keyring --namespace=ceph
|
|
kubectl create secret generic ceph-bootstrap-mds-keyring --from-file=ceph.keyring=ceph.mds.keyring --namespace=ceph
|
|
kubectl create secret generic ceph-bootstrap-osd-keyring --from-file=ceph.keyring=ceph.osd.keyring --namespace=ceph
|
|
kubectl create secret generic ceph-client-key --from-file=ceph-client-key --namespace=ceph
|