mgr/cephadm: set mgr cap for NVMeoF to allow cmd "service dump"

Allow nvmeof daemons cap to run mgr command "service dump".
This helps to map gateway_id with hostname (info needed to resolve
nvmeof issue https://github.com/ceph/ceph-nvmeof/issues/1974)

Fixes: https://tracker.ceph.com/issues/78339
Signed-off-by: Vallari Agrawal <vallari.agrawal@ibm.com>

diff --git a/src/pybind/mgr/cephadm/services/nvmeof.py b/src/pybind/mgr/cephadm/services/nvmeof.py
index 8881185babb20d213edaabe0ab96905b28c25051..ccaaebe71759b77c8f9b3bf5f1da3f62bc0cdd07 100644 (file)
--- a/src/pybind/mgr/cephadm/services/nvmeof.py
+++ b/src/pybind/mgr/cephadm/services/nvmeof.py
@@ -126,6 +126,7 @@ class NvmeofService(CephService):
         map_discovery_addr = spec.discovery_addr_map.get(daemon_spec.host) if spec.discovery_addr_map else None
         keyring = self.get_keyring_with_caps(self.get_auth_entity(nvmeof_gw_id),
                                              ['mon', 'profile rbd',
+                                              'mgr', 'allow command "service dump"',
                                               'osd', 'profile rbd'])
 
         super().prepare_certificates(daemon_spec)