aboutsummaryrefslogtreecommitdiff
path: root/roles/cephadm
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2021-07-29 15:27:48 +0000
committerGerrit Code Review <review@openstack.org>2021-07-29 15:27:48 +0000
commitc17fa464f2ec590c8a284c1115d60cc1e5738713 (patch)
tree755f6cc41d49d9ab1e90c866d89c7ff2875f80a7 /roles/cephadm
parent81a0bb833158eb7a90978c71e97d62c098a31d81 (diff)
parent682cff7bc888ddf99fcbfd66204646c4194fc1a3 (diff)
downloadkolla-ansible-c17fa464f2ec590c8a284c1115d60cc1e5738713.tar.gz
kolla-ansible-c17fa464f2ec590c8a284c1115d60cc1e5738713.zip
Merge "Revert "cephadm: Set auth_allow_insecure_global_id_reclaim to true""
Diffstat (limited to 'roles/cephadm')
-rw-r--r--roles/cephadm/tasks/main.yml11
1 files changed, 0 insertions, 11 deletions
diff --git a/roles/cephadm/tasks/main.yml b/roles/cephadm/tasks/main.yml
index 06675186a..d8795050e 100644
--- a/roles/cephadm/tasks/main.yml
+++ b/roles/cephadm/tasks/main.yml
@@ -79,17 +79,6 @@
become: True
loop: "{{ cephadm_ceph_osd_devices }}"
-# NOTE(mnasiadka): Ubuntu uses pre 15.2.11 Octopus client code and suffers from
-# https://docs.ceph.com/en/latest/security/CVE-2021-20288/
-
-- name: Set auth_allow_insecure_global_id_reclaim to True
- command:
- cmd: >
- cephadm shell --
- ceph config set mon auth_allow_insecure_global_id_reclaim true
- become: true
- when: ansible_distribution == "Ubuntu"
-
- name: Create and initialise pools for OpenStack services
command:
cmd: >