mgr/cephadm: disallow removing the mon keyring

Signed-off-by: Michael Fritch <[email protected]>
ypdai · Sep 11, 2020 · 2266cc1 · 2266cc1
1 parent 11bbfd5
commit 2266cc1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/pybind/mgr/cephadm/services/cephadmservice.py b/src/pybind/mgr/cephadm/services/cephadmservice.py
@@ -294,6 +294,10 @@ def remove_keyring(self, daemon: DaemonDescription):
         daemon_id: str = daemon.daemon_id
         host: str = daemon.hostname
 
+        if daemon_id == 'mon':
+            # do not remove the mon keyring
+            return
+
         entity = self.get_auth_entity(daemon_id, host=host)
 
         logger.info(f'Remove keyring: {entity}')