-
Notifications
You must be signed in to change notification settings - Fork 54
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add read/write and grant config info for external etcd in cluster guide #2218
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry this has lingered so long. I spent some time testing this myself and found a few things I think we should add.
To start etcd for `backend-1` based on the [three-node configuration example][19]: | ||
To initialize a backend that uses etcd authentication, configure read and write access to the `/sensu.io/` key space for your users: | ||
{{< highlight shell >}} | ||
/opt/etcd/etcdctl role grant-permission sensu_readwrite readwrite --from-key '/sensu.io/' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/opt/etcd/etcdctl role grant-permission sensu_readwrite readwrite --from-key '/sensu.io/' | |
# Add the sensu user, you'll be prompted for the password interactively | |
etcdctl user add sensu | |
# Create a role | |
etcdctl role add sensu_readwrite | |
# Give that role permission to read and write under the /sensu.io/ keyspace | |
etcdctl role grant-permission sensu_readwrite readwrite --from-key '/sensu.io/' | |
# Grant the sensu user the role | |
etcdctl user grant-role sensu sensu_readwrite |
I found additional steps necessary here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This will need .initialized still too. I just built a new cluster and it failed to init without having access to that key.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@tarcinil do you mean we need to incorporate http://localhost:1313/sensu-go/5.20/installation/install-sensu/#3-initialize by reference? Or do you mean something else?
Co-authored-by: Cameron Johnston <cameron@sensu.io>
Co-authored-by: Cameron Johnston <cameron@sensu.io>
Co-authored-by: Cameron Johnston <cameron@sensu.io>
Closed in favor of #2792 |
Description
Add information about configuring read/write access and grant permission for etcd auth.
Motivation and Context
#2184
Review Instructions
This feels like it might be a little thin. Am I missing some details in my explanation?
Also, I want to make sure I added this in the best place in the docs.