mkcephfs: give mon. key 'allow *' mon caps

This will ease the transition from mkcephfs to ceph-deploy by allowing
ceph-create-keys to use the mon. keyring file in $mon_data and get the
caps it needs.

Fixes: #4756
Signed-off-by: Sage Weil <sage@inktank.com>

diff --git a/src/mkcephfs.in b/src/mkcephfs.in
index 87bf7f8040e442a377564426efe6d8078110531f..28385686a509eb8b622962b967028fb401054625 100644 (file)
--- a/src/mkcephfs.in
+++ b/src/mkcephfs.in
@@ -423,7 +423,7 @@ if [ $preparemon -eq 1 ]; then
        --cap mds 'allow' \
        $dir/keyring.mon
 
-    $BINDIR/ceph-authtool --gen-key -n mon. $dir/keyring.mon
+    $BINDIR/ceph-authtool --gen-key -n mon. $dir/keyring.mon --cap mon 'allow *'
 
     for k in $dir/key.*
     do