doc/rados/ops: add caps restore command

Add a command that restores caps to client.admin after they have been
accidentally destroyed or removed.

Fixes: https://tracker.ceph.com/issues/23594
Signed-off-by: Zac Dover <zac.dover@proton.me>
(cherry picked from commit de8c148a2f99db3a1dc4eb70a19aca19a0e9bacf)

diff --git a/doc/rados/operations/user-management.rst b/doc/rados/operations/user-management.rst
index 23e894621e2828f62d8000e410d7cb645ccb74f2..fcaa30fb071267e32da5d2343e92edc52a5490f6 100644 (file)
--- a/doc/rados/operations/user-management.rst
+++ b/doc/rados/operations/user-management.rst
@@ -336,6 +336,17 @@ The following entries describe valid capability profiles:
               with the manager ``crash`` module to upload daemon crash
               dumps into monitor storage for later analysis.
 
+.. important:: If you run the command ``ceph auth caps client.admin mgr
+   'allow*'``, you will remove necessary capabilities from ``client.admin``. To
+   repair this, run a command of the following form from within the
+   ``/var/lib/ceph/mon/<monitor_name>`` directory:
+
+      .. prompt:: bash #
+
+         ceph -n mon. --keyring keyring auth caps client.admin mds 'allow *' osd 'allow *' mon 'allow *'
+
+
+
 Pool
 ----