Set auth_allow_insecure_global_id_reclaim to false

This is for Ceph CVE-2021-20288 to prevent it from being stuck in HEALTH_WARN.
jd · Jun 30, 2021 · fb376a8 · fb376a8
1 parent 6bb66de
commit fb376a8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pifpaf/drivers/ceph.py b/pifpaf/drivers/ceph.py
@@ -130,6 +130,9 @@ def _setUp(self):
 mon data avail warn = 2
 mon data avail crit = 1
 
+# Ceph CVE CVE-2021-20288 to prevent HEALTH_WARN
+auth allow insecure global id reclaim = false
+
 [mon.a]
 host = localhost
 mon addr = 127.0.0.1:%(port)d