]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
ceph-create-keys: update client.admin if it already exists 15112/head
authorJohn Spray <john.spray@redhat.com>
Tue, 16 May 2017 12:28:48 +0000 (13:28 +0100)
committerJohn Spray <john.spray@redhat.com>
Tue, 16 May 2017 12:28:48 +0000 (13:28 +0100)
commit82332b7a3bb043d84f51520cbc3674acb25b25dd
tree17336fd2b7e70cb79a6ab69449ed96193ce23138
parent2a616ddbc39033982a348d4f548c209108dc758f
ceph-create-keys: update client.admin if it already exists

This means that anyone who de-privileges their client.admin
user will find that it gets resets with full privileges again.
This is necessary because we cannot distinguish between an old
key and a deliberately de-privileged key, and it's okay because
this is the admin key, it's meant to have access to everything.

Fixes: http://tracker.ceph.com/issues/19940
Signed-off-by: John Spray <john.spray@redhat.com>
src/ceph-create-keys