doc/rados/ops: add caps restore command

Add a command that restores caps to client.admin after they have been
accidentally destroyed or removed.

Fixes: https://tracker.ceph.com/issues/23594
Signed-off-by: Zac Dover <zac.dover@proton.me>

diff --git a/doc/rados/operations/user-management.rst b/doc/rados/operations/user-management.rst
index cd8e378fa9d2d9cc79ddaf4d3aeb7f71f889b3e1..6a0eae9b54b320719ee854f029a59efd535bbe37 100644 (file)
--- a/doc/rados/operations/user-management.rst
+++ b/doc/rados/operations/user-management.rst
@@ -336,6 +336,17 @@ The following entries describe valid capability profiles:
               with the manager ``crash`` module to upload daemon crash
               dumps into monitor storage for later analysis.
 
+.. important:: If you run the command ``ceph auth caps client.admin mgr
+   'allow*'``, you will remove necessary capabilities from ``client.admin``. To
+   repair this, run a command of the following form from within the
+   ``/var/lib/ceph/mon/<monitor_name>`` directory:
+
+      .. prompt:: bash #
+
+         ceph -n mon. --keyring keyring auth caps client.admin mds 'allow *' osd 'allow *' mon 'allow *'
+
+
+
 Pool
 ----