From fd48df5af06aa8e75c2e742645ebf410920ff2b2 Mon Sep 17 00:00:00 2001
From: Dimitri Savineau <dsavinea@redhat.com>
Date: Mon, 19 Apr 2021 11:52:09 -0400
Subject: [PATCH] demo: stop allowing insecure reconnections

This set auth_allow_insecure_global_id_reclaim to false otherwise the
ceph status won't be OK:

health: HEALTH_WARN
        mon is allowing insecure global_id reclaim

Signed-off-by: Dimitri Savineau <dsavinea@redhat.com>
(cherry picked from commit 660f3999e45460236fbb4e8a1054848959474ca8)
---
 src/daemon/start_mon.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/daemon/start_mon.sh b/src/daemon/start_mon.sh
index c04967291..75e4edb6d 100755
--- a/src/daemon/start_mon.sh
+++ b/src/daemon/start_mon.sh
@@ -186,6 +186,9 @@ function start_mon {
       if ! grep -qE "mon warn on pool no redundancy = false" /etc/ceph/"${CLUSTER}".conf; then
           echo "mon warn on pool no redundancy = false" >> /etc/ceph/"${CLUSTER}".conf
       fi
+      if ! grep -qE "auth allow insecure global id reclaim = false" /etc/ceph/"${CLUSTER}".conf; then
+          echo "auth allow insecure global id reclaim = false" >> /etc/ceph/"${CLUSTER}".conf
+      fi
     fi
     /usr/bin/ceph-mon "${DAEMON_OPTS[@]}" -i "${MON_NAME}" --mon-data "$MON_DATA_DIR" --public-addr "${MON_IP}"