On Fri, Aug 21, 2026 at 10:32 AM Jan Kasprzak <kas@fi.muni.cz> wrote:
Hello Patrick,
regarding the step 4 of the documentation: I upgraded another cluster, and now I see the issue:
4. Confirm the AUTH_INSECURE_SERVICE_KEY_TYPE is cleared.
ceph --format=json health detail | jq '.checks | has("AUTH_INSECURE_SERVICE_KEY_TYPE") | not'
output gives false.
If it outputs true, there is another daemon that needs to be upgraded. Check the output of ceph health detail.
This is incorrect. When all the daemons have their keys rotated, then "ceph health detail" does _not_ contain AUTH_INSECURE_SERVICE_KEY_TYPE error, so the above "... | not" returns true, not false.
So either remove the "| not" part from the docs, or replace false <--> true in the next two sentences.
Thank you for the correction. Will be fixed: https://tracker.ceph.com/issues/79710 -- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D