mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"

Otherwise it is impossible to make rbd snapshots

Fixes: https://tracker.ceph.com/issues/65691
Signed-off-by: Adam King <adking@redhat.com>
(cherry picked from commit c83c2cd5b0f9d35465d8f11680c95deff54e746b)

diff --git a/src/pybind/mgr/cephadm/services/nvmeof.py b/src/pybind/mgr/cephadm/services/nvmeof.py
index d133ad75d252fa963e533b9852aa22b3c68a63be..d1b571dd64c570c699f795faeaacc895e03f266f 100644 (file)
--- a/src/pybind/mgr/cephadm/services/nvmeof.py
+++ b/src/pybind/mgr/cephadm/services/nvmeof.py
@@ -32,7 +32,7 @@ class NvmeofService(CephService):
 
         keyring = self.get_keyring_with_caps(self.get_auth_entity(nvmeof_gw_id),
                                              ['mon', 'profile rbd',
-                                              'osd', 'allow all tag rbd *=*'])
+                                              'osd', 'profile rbd'])
 
         # TODO: check if we can force jinja2 to generate dicts with double quotes instead of using json.dumps
         transport_tcp_options = json.dumps(spec.transport_tcp_options) if spec.transport_tcp_options else None