Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Report encryption support before first attempt #455

Open
masnax opened this issue Nov 7, 2024 · 2 comments
Open

Report encryption support before first attempt #455

masnax opened this issue Nov 7, 2024 · 2 comments

Comments

@masnax
Copy link
Contributor

masnax commented Nov 7, 2024

MicroCeph supports OSD encryption with the --encrypt flag. In order for this to work, a user must first run the following before adding the disks they want.

sudo snap connect microceph:dm-crypt
sudo snap restart microceph.daemon

However, in practice you are only informed of the current status if you manually attempt to add a disk. If the above connection hasn't been established, MicroCeph returns an error informing you to run those commands and try again.

This poses a particular issue for MicroCloud because we can't view MicroCeph's snap connections. Instead after the clusters have been formed and the disks are being created, the whole initialization breaks because the connection was not established beforehand.

It would be convenient if this information could be included in microceph status with a line similar to encryption: enabled/disabled. That way in MicroCloud we can detect ahead of time if the connection has been made by checking against the MicroCeph API. Then we can either prompt the user to enable encryption per OSD or warn them that encryption is not enabled across their snaps.

Not a blocker for the LTS, but would be nice to include in a coming point release.

@masnax
Copy link
Contributor Author

masnax commented Nov 7, 2024

Doesn't look like MicroCeph has a status API so I don't know if services or config is a better place for this, and then it can also be included in the CLI status command as well.

@UtkarshBhatthere
Copy link
Contributor

status API is incoming :D #453

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants