mgr/smb: Allow pool creation for empty RGW buckets

When an RGW bucket is empty, SMB clients cannot create directories,
files, or upload data because the default.rgw.buckets.data pool does
not yet exist. The previous CephX capabilities ('mon allow r') did not
permit pool creation during the first write operation.

The fix changes the mon capability from 'allow r' to 'allow *' to
enable pool creation on the first write to an empty RGW bucket. Once
the pool exists, subsequent operations succeed normally.

Fixes: https://tracker.ceph.com/issues/77764
Signed-off-by: Shweta Sodani <ssodani@redhat.com>

diff --git a/src/pybind/mgr/smb/rgw_auth.py b/src/pybind/mgr/smb/rgw_auth.py
index 14929f17765de87a7d314a33de7f083e75708deb..fbe873fd4419c739fbe25e55da10f08e9965c9d3 100644 (file)
--- a/src/pybind/mgr/smb/rgw_auth.py
+++ b/src/pybind/mgr/smb/rgw_auth.py
@@ -33,7 +33,7 @@ class RGWAuthorizer:
         if not caps:
             caps = [
                 'mon',
-                'allow r',
+                'allow *',  # Required for pool creation on first write to empty RGW buckets
                 'osd',
                 'allow rwx tag rgw *=*',
             ]