Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add read/write and grant config info for external etcd in cluster guide #2218

Closed
wants to merge 17 commits into from

Conversation

hillaryfraley
Copy link
Contributor

@hillaryfraley hillaryfraley commented Feb 25, 2020

Description

Add information about configuring read/write access and grant permission for etcd auth.

Motivation and Context

#2184

Review Instructions

This feels like it might be a little thin. Am I missing some details in my explanation?

Also, I want to make sure I added this in the best place in the docs.

@hillaryfraley hillaryfraley added the update Add to or refresh existing info label Feb 25, 2020
@hillaryfraley hillaryfraley requested a review from a team February 25, 2020 19:22
@hillaryfraley hillaryfraley self-assigned this Feb 25, 2020
@cwjohnston cwjohnston temporarily deployed to sensu-docs-initialize-e-jgn5qq February 25, 2020 19:22 Inactive
@hillaryfraley hillaryfraley changed the title Add initialize key grant info for external etcd in cluster guide Add read/write and grant config info for external etcd in cluster guide Feb 25, 2020
@hillaryfraley hillaryfraley added the content review ready Needs content or first-pass review label Feb 25, 2020
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-jgn5qq February 25, 2020 21:03 Inactive
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-jgn5qq February 25, 2020 21:10 Inactive
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-jgn5qq February 25, 2020 21:14 Inactive
@hillaryfraley hillaryfraley added this to the Aged PRs milestone May 18, 2020
@cwjohnston cwjohnston temporarily deployed to sensu-docs-initialize-e-g6i9ef June 4, 2020 03:45 Inactive
Copy link
Contributor

@cwjohnston cwjohnston left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry this has lingered so long. I spent some time testing this myself and found a few things I think we should add.

To start etcd for `backend-1` based on the [three-node configuration example][19]:
To initialize a backend that uses etcd authentication, configure read and write access to the `/sensu.io/` key space for your users:
{{< highlight shell >}}
/opt/etcd/etcdctl role grant-permission sensu_readwrite readwrite --from-key '/sensu.io/'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
/opt/etcd/etcdctl role grant-permission sensu_readwrite readwrite --from-key '/sensu.io/'
# Add the sensu user, you'll be prompted for the password interactively
etcdctl user add sensu
# Create a role
etcdctl role add sensu_readwrite
# Give that role permission to read and write under the /sensu.io/ keyspace
etcdctl role grant-permission sensu_readwrite readwrite --from-key '/sensu.io/'
# Grant the sensu user the role
etcdctl user grant-role sensu sensu_readwrite

I found additional steps necessary here.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will need .initialized still too. I just built a new cluster and it failed to init without having access to that key.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tarcinil do you mean we need to incorporate http://localhost:1313/sensu-go/5.20/installation/install-sensu/#3-initialize by reference? Or do you mean something else?

content/sensu-go/5.18/guides/clustering.md Show resolved Hide resolved
Co-authored-by: Cameron Johnston <cameron@sensu.io>
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-g6i9ef June 5, 2020 18:55 Inactive
@hillaryfraley hillaryfraley requested a deployment to sensu-docs-initialize-e-g6i9ef June 5, 2020 18:55 Abandoned
Co-authored-by: Cameron Johnston <cameron@sensu.io>
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-g6i9ef June 5, 2020 18:57 Inactive
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-g6i9ef June 5, 2020 18:57 Inactive
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-g6i9ef June 5, 2020 19:04 Inactive
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-g6i9ef June 5, 2020 19:05 Inactive
content/sensu-go/5.18/guides/clustering.md Outdated Show resolved Hide resolved
Co-authored-by: Cameron Johnston <cameron@sensu.io>
@hillaryfraley
Copy link
Contributor Author

Closed in favor of #2792

@hillaryfraley hillaryfraley reopened this Apr 26, 2021
@hillaryfraley hillaryfraley temporarily deployed to sensu-docs-initialize-e-l0n8bo April 26, 2021 18:30 Inactive
@hillaryfraley hillaryfraley removed ready for review PR is ready to review update Add to or refresh existing info labels Apr 28, 2021
@calebhailey calebhailey added aged pull requests aging PRs Longtime PRs that need attention labels Sep 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
aging PRs Longtime PRs that need attention
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants