Hi, On 8/20/26 21:35, Patrick Donnelly wrote:

...

A challenge to that approach is that Proxmox PVE defines external RBD pools at the datacenter level using a single user/key pair. This then becomes the storage pool on each individual node in the proxmox cluster. I believe ceph-csi K8 storage class also defines this once cluster wide. I understand but the only way to change things is to spread the word. If the key is that challenging to rotate, then I would suggest leaving it as aes and push for changes in the product or deployment technology. Rook developers are already aware this should be reworked.

So you expect every user running Proxmox PVE, K8s with ceph csi or Openstack (which is usually more than just a handful of hosts) to figure out how to adopt their deployment? Which is not possible at this time for the mentioned cases. Most users will probably welcome a more detailed documentation on how to handle key rotation _and_ especially how to manage the client side in this scenario. As was already mentioned before, most of us cannot simply shutdown all virtual machines in Proxmox or Openstack for a key rotation.... Best regards, Burkhard Linke