Bug #2188
closedmon: mds rm should be harder to break things with
0%
Description
If you run ceph mds rm 0 on a healthy cluster, it breaks the Monitor's world. I'm uncomfortable with the command existing, but don't want to remove it on my own.
Still, if it stays, it should have:
1) A yes-i-really-mean-it guard
2) Some method of dealing with actually removing a live MDS. Returning an error if it's up? Pulling it out of the up set and mds_info (I think that might force it to shut down, though it leaves the logical around)?
3) Some documentation.
Updated by Sage Weil about 12 years ago
- Status changed from New to Resolved
- Target version set to v0.47
added checks that the gid exist and that it is not active. with those in place, this is no longer dangerous... all you can do is remove a standby or other stray entry, so i didn't add an extra guard.
docs can come later; this isn't the first thing about the mds to write down.