From fb376a83a47d678952672a7f5d36a02101135fb2 Mon Sep 17 00:00:00 2001 From: Tobias Urdin Date: Thu, 20 May 2021 17:06:51 +0200 Subject: [PATCH] Set auth_allow_insecure_global_id_reclaim to false This is for Ceph CVE-2021-20288 to prevent it from being stuck in HEALTH_WARN. --- pifpaf/drivers/ceph.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pifpaf/drivers/ceph.py b/pifpaf/drivers/ceph.py index a5ce370..6b256e6 100644 --- a/pifpaf/drivers/ceph.py +++ b/pifpaf/drivers/ceph.py @@ -130,6 +130,9 @@ def _setUp(self): mon data avail warn = 2 mon data avail crit = 1 +# Ceph CVE CVE-2021-20288 to prevent HEALTH_WARN +auth allow insecure global id reclaim = false + [mon.a] host = localhost mon addr = 127.0.0.1:%(port)d