]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
mon/MDSMonitor: add mon auth caps for CephFS names
authorDouglas Fuller <dfuller@redhat.com>
Fri, 1 Mar 2019 16:41:45 +0000 (11:41 -0500)
committerRishabh Dave <ridave@redhat.com>
Thu, 10 Sep 2020 11:40:51 +0000 (17:10 +0530)
commit811e48d6ffd841ecd93a57eb00c6aceae476f4f8
tree3b959680ea965e494009d4ca311fc3d17e0f0afa
parent4ade3e84ad48ab07453b8f4671f64499539c041a
mon/MDSMonitor: add mon auth caps for CephFS names

Add a 'fsname' clause to mon auth caps to restrict a client's view
of the FSMap. Example:

mon 'allow rw fsname=cephfs2'

This would restrict the client's view of the FSMap to the MDSMap for
cephfs2. Any MDS allocated to a different filesystem will be invisible.
Global standby daemons are always visible. To allow multiple CephFSs,
add multiple caps:

mon 'allow rw fsname=cephfs2, allow rw fsname=cephfs2'

Fixes: http://tracker.ceph.com/issues/15070
Signed-off-by: Douglas Fuller <dfuller@redhat.com>
Signed-off-by: Rishabh Dave <ridave@redhat.com>
13 files changed:
PendingReleaseNotes
doc/cephfs/client-auth.rst
src/mds/FSMap.cc
src/mds/FSMap.h
src/mon/FSCommands.cc
src/mon/FSCommands.h
src/mon/MDSMonitor.cc
src/mon/MDSMonitor.h
src/mon/MonCap.cc
src/mon/MonCap.h
src/mon/Monitor.cc
src/mon/Monitor.h
src/mon/Session.h