2 Nov
2026
2 Nov
'26
10:06 a.m.
Dear Robert, As Julien has already mentioned, one is supposed to rotate those keys themselves. Note that if you use cephadm, this does include bootstrap keys in spite of a comment which appeared on this list in (IIRC) late August and which suggested bootstrap keys could simply be deleted on a provisioned cluster. As I found the hard way not long ago while adding a new server to one of our Ceph clusters which no longer had bootstrap keys, cephadm needs the bootstrap-osd key in order to be able to add new OSDs. Interestingly enough, basic services (mon, mgr, crash, node-exporter, ceph-exporter) deployed fine. -- MS