Openstack

[virsh] virsh secret-list permission denied

plastic2113 2024. 12. 6. 16:15
728x90
반응형

Symptoms..

/etc/nova/nova-compute.log 를 보면 block에 대해 error connecting: permission denied가 뜬다.

qemu-kvm: -blockdev {"driver":"rbd","pool":"volumes","image":"volume-29a2f487-1ba9-48b3-b3ac-3b675be1e770","server":[{"host":"[mon0]","port":"6789"},{"host":"[mon1]","port":"6789"},{"host":"[mon2]","port":"6789"}],"user":"cinder","auth-client-required":["cephx","none"],"key-secret":"libvirt-1-storage-auth-secret0","node-name":"libvirt-1-storage","auto-read-only":true,"discard":"unmap","cache":{"direct":false,"no-flush":false}}: error connecting: Permission denied

* openstack의 cinder와 ceph를 연동해서 사용.

반응형

Touble-shooting..

해당 compute노드에 secret-key를 정확하게 재등록.

# secret-key 
secret_key='[rbd_secret_uuid]'
cinder_key='[client_cinder_key]'

echo "<secret ephemeral='no' private='no'>
  <uuid>${secret_key}</uuid>
  <usage type='ceph'>
    <name>client.cinder secret</name>
  </usage>
</secret>" > secret.xml
virsh secret-define --file secret.xml

echo $cinder_key > client.volume.key
virsh secret-set-value --secret $secret_key --base64 $(cat client.volume.key)

virsh secret-list
728x90

Verifying..

virsh secret-list로 확인 후 하려던 작업 마저 진행..

728x90
반응형