Hello Patrick, regarding the step 4 of the documentation: I upgraded another cluster, and now I see the issue:

4. Confirm the AUTH_INSECURE_SERVICE_KEY_TYPE is cleared.

ceph --format=json health detail | jq '.checks | has("AUTH_INSECURE_SERVICE_KEY_TYPE") | not'

output gives false.

If it outputs true, there is another daemon that needs to be upgraded. Check the output of ceph health detail.

This is incorrect. When all the daemons have their keys rotated, then "ceph health detail" does _not_ contain AUTH_INSECURE_SERVICE_KEY_TYPE error, so the above "... | not" returns true, not false. So either remove the "| not" part from the docs, or replace false <--> true in the next two sentences. Regards, -Yenya -- | Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work | yenya.net - private}> | | https://www.fi.muni.cz/~kas/ GPG: 4096R/A45477D5 | I don't like Python; its lack of inline, anonymous, multi-statement functions makes me sad. --Eric Wastl