From 682cff7bc888ddf99fcbfd66204646c4194fc1a3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rados=C5=82aw=20Piliszek?= <radoslaw.piliszek@gmail.com>
Date: Wed, 9 Jun 2021 08:28:14 +0000
Subject: [PATCH] Revert "cephadm: Set auth_allow_insecure_global_id_reclaim to
 true"

This reverts commit a967b9dd66fad5b055b071794a4b059feed9fe90.

Reason for revert: Check if it's still the case.

Change-Id: Ib5496d6bc2ddfe1fedacc4f9c859ac56fc69726e
---
 roles/cephadm/tasks/main.yml | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/roles/cephadm/tasks/main.yml b/roles/cephadm/tasks/main.yml
index 06675186a3..d8795050e1 100644
--- a/roles/cephadm/tasks/main.yml
+++ b/roles/cephadm/tasks/main.yml
@@ -79,17 +79,6 @@
   become: True
   loop: "{{ cephadm_ceph_osd_devices }}"
 
-# NOTE(mnasiadka): Ubuntu uses pre 15.2.11 Octopus client code and suffers from
-#                  https://docs.ceph.com/en/latest/security/CVE-2021-20288/
-
-- name: Set auth_allow_insecure_global_id_reclaim to True
-  command:
-    cmd: >
-         cephadm shell --
-         ceph config set mon auth_allow_insecure_global_id_reclaim true
-  become: true
-  when: ansible_distribution == "Ubuntu"
-
 - name: Create and initialise pools for OpenStack services
   command:
     cmd: >