Chapter 23. Upgrading a director-deployed Ceph Storage cluster to Red Hat Ceph Storage 4
If your deployment uses a Red Hat Ceph Storage cluster that was deployed using director, you must complete the procedures included in this section.
When you upgrade a Red Hat Ceph Storage cluster from a previous supported version to version 4.2z2, the upgrade completes with the storage cluster in a
HEALTH_WARN state with a warning message that states monitors are allowing insecure
global_id reclaim. This is due to the patched CVE (CVE-2021-20288), see Ceph HEALTH_WARN with 'mons are allowing insecure global_id reclaim' after install/upgrade to RHCS 4.2z2 (or newer).
HEALTH_WARN state is displayed due to the CVE, it is possible to mute health warnings temporarily. However, there is a risk that if you mute warnings you do not have visibility about potential older and unpatched clients connected to your cluster. For more information about muting health warnings, see Upgrading a Red Hat Ceph Storage cluster in the Red Hat Ceph Storage documentation.
Do not disable
global_id_reclaim manually until all clients are upgraded and patched otherwise they cannot connect. You can run the following command as the
root user to view a list of unpatched clients that are connected to the cluster:
# ceph health detail
After you upgrade the overcloud, upgrade your director-deployed Ceph Storage cluster to Red Hat Ceph Storage cluster to version 4.
23.1. Installing ceph-ansible
If your deployment uses a Red Hat Ceph Storage cluster that was deployed using director, you must complete this procedure.
ceph-ansible package is required when you use Ceph Storage with Red Hat OpenStack Platform.
Enable the Ceph Tools repository:
[stack@director ~]$ sudo subscription-manager repos --enable=rhceph-4-tools-for-rhel-8-x86_64-rpms
[stack@director ~]$ sudo dnf install -y ceph-ansible
23.2. Upgrading to Ceph Storage 4
Upgrade the Ceph Storage nodes from version 3 to version 4.
If you are not using the default stack name (
overcloud), set your stack name with the
--stack STACK NAME option replacing
STACK NAME with the name of your stack.
$ source ~/stackrc
Run the Ceph Storage external upgrade process with the
$ openstack overcloud external-upgrade run --stack STACK NAME --tags ceph
- Wait until the Ceph Storage upgrade completes.