pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred

There's no reason for this cap to be used for talking to the MDS. The
individual exports have their own caps for talking to the file system.

Fixes: https://tracker.ceph.com/issues/45632
Signed-off-by: Patrick Donnelly <pdonnell@redhat.com>

diff --git a/src/pybind/mgr/cephadm/services/nfs.py b/src/pybind/mgr/cephadm/services/nfs.py
index ee847c3e131dc6f97a9ed86aa0852613a392d0a3..cc786d33ed6a00f6dbbcd6ba0720566d62c50cf3 100644 (file)
--- a/src/pybind/mgr/cephadm/services/nfs.py
+++ b/src/pybind/mgr/cephadm/services/nfs.py
@@ -124,8 +124,7 @@ class NFSGanesha(object):
             'prefix': 'auth caps',
             'entity': entity,
             'caps': ['mon', 'allow r',
-                     'osd', osd_caps,
-                     'mds', 'allow rw'],
+                     'osd', osd_caps],
         })
 
         if ret != 0: