]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
cephadm: ceph-iscsi remove pool from cap 35786/head
authorMatthew Oliver <moliver@suse.com>
Fri, 26 Jun 2020 00:15:12 +0000 (00:15 +0000)
committerMatthew Oliver <moliver@suse.com>
Fri, 26 Jun 2020 00:15:12 +0000 (00:15 +0000)
commit8cf51251a3299bf5a65ea338f9fb06c4f3052ad1
tree5f9a247ae7af817a7897fb1cd4d1e1bd9bfb98f3
parent4471cfe411ed7052a4a678a0379ee0599c26714e
cephadm: ceph-iscsi remove pool from cap

When we create a ceph-iscsi daemon/continer in cephadm we create a user
and set some caps. Turns out we were a little too restrictive.

We were locking down to only access the pool that was given in the spec,
which happens to be the pool the iscsi config is stored. But in reality
we need to be able  to attach any rbd images which could exist in other
pools.

So this patch removes the `pool=` from the osd cap, so from:

   osd = allow rwx pool={spec.pool}

To:

   osd = allow rwx

Fixes: https://tracker.ceph.com/issues/46138
Signed-off-by: Matthew Oliver <moliver@suse.com>
src/pybind/mgr/cephadm/services/iscsi.py