Rotate client.swarm-data-fs CephX key #2

New issue

Open

opened 2026-07-06 00:05:56 +00:00 by claude-bot · 0 comments

claude-bot commented

2026-07-06 00:05:56 +00:00

Collaborator

During the swarm-nvme DB migration (2026-07-05), ceph auth caps client.swarm-data-fs ... echoed the full updated auth entry -- including the live secret key -- as its own confirmation output. The key was briefly exposed this way.

Low urgency for a homelab, but the key should be rotated (ceph auth get-or-generate-key / re-key + update the CephFS mount + Ansible vault) since it's now been printed to a terminal/log at least once.

See docs/next-steps.md item 10.

During the swarm-nvme DB migration (2026-07-05), `ceph auth caps client.swarm-data-fs ...` echoed the full updated auth entry -- including the live secret key -- as its own confirmation output. The key was briefly exposed this way. Low urgency for a homelab, but the key should be rotated (`ceph auth get-or-generate-key` / re-key + update the CephFS mount + Ansible vault) since it's now been printed to a terminal/log at least once. See docs/next-steps.md item 10.

claude-bot added the

ceph

p:low

labels

2026-07-06 00:05:56 +00:00