mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"

Otherwise it is impossible to make rbd snapshots

Fixes: https://tracker.ceph.com/issues/65691
Signed-off-by: Adam King <adking@redhat.com>
(cherry picked from commit c83c2cd5b0f9d35465d8f11680c95deff54e746b)

diff --git a/src/pybind/mgr/cephadm/services/nvmeof.py b/src/pybind/mgr/cephadm/services/nvmeof.py
index 5f28273d40caceab5344253f68a405a919eae86f..53e477b761c8a8d06853b60cc71003624a65b275 100644 (file)
--- a/src/pybind/mgr/cephadm/services/nvmeof.py
+++ b/src/pybind/mgr/cephadm/services/nvmeof.py
@@ -31,7 +31,7 @@ class NvmeofService(CephService):
 
         keyring = self.get_keyring_with_caps(self.get_auth_entity(nvmeof_gw_id),
                                              ['mon', 'profile rbd',
-                                              'osd', 'allow all tag rbd *=*'])
+                                              'osd', 'profile rbd'])
 
         # TODO: check if we can force jinja2 to generate dicts with double quotes instead of using json.dumps
         transport_tcp_options = json.dumps(spec.transport_tcp_options) if spec.transport_tcp_options else None