mgr/volumes: While creating nfs-ganesha user update its cap

Signed-off-by: Varsha Rao <varao@redhat.com>
(cherry picked from commit 6363b887eeb50cb5dba8f7ef3c8d075fda5d1b27)

diff --git a/src/pybind/mgr/volumes/fs/nfs.py b/src/pybind/mgr/volumes/fs/nfs.py
index 3bb6420e6a5b658dfccb6c44985fadb7f877d157..4ac12d363a090d665c30ac141dea333728f94ad6 100644 (file)
--- a/src/pybind/mgr/volumes/fs/nfs.py
+++ b/src/pybind/mgr/volumes/fs/nfs.py
@@ -197,7 +197,7 @@ class NFSConfig(object):
             ret, out, err = self.mgr.mon_command({
                 'prefix': 'auth caps',
                 'entity': "client.%s" % (self.cluster_id),
-                'caps' : ['mon', 'allow r', 'osd', 'allow rw pool=%s namespace=%s, allow rw tag cephfs data=a' % (self.pool_name, self.pool_ns), 'mds', 'allow rw path=/'],
+                'caps' : ['mon', 'allow *', 'osd', 'allow * pool=%s namespace=%s, allow rw tag cephfs data=a' % (self.pool_name, self.pool_ns), 'mds', 'allow * path=/'],
                 })
 
             if ret!= 0:
@@ -292,12 +292,11 @@ class NFSConfig(object):
 
             if r != 0:
                 return r, out, err
-            log.info("pool enable done r: {}".format(out))
 
         ret, out, err = self.mgr.mon_command({
             'prefix': 'auth get-or-create',
             'entity': client,
-            'caps' : ['mon', 'allow r', 'osd', 'allow rw pool=%s namespace=%s' % (self.pool_name, self.pool_ns)],
+            'caps' : ['mon', 'allow r', 'osd', 'allow rw pool=%s namespace=%s, allow rw tag cephfs data=a' % (self.pool_name, self.pool_ns), 'mds', 'allow rw path=/'],
             'format': 'json',
             })