]> git.apps.os.sepia.ceph.com Git - ceph.git/commitdiff
mon: allow `auth caps` for `mgr` profile
authorMichael Fritch <mfritch@suse.com>
Tue, 17 Mar 2020 17:17:17 +0000 (11:17 -0600)
committerMichael Fritch <mfritch@suse.com>
Wed, 25 Mar 2020 22:26:14 +0000 (16:26 -0600)
cephadm orchestrator needs to update the caps during reconfig/redeploy

Signed-off-by: Michael Fritch <mfritch@suse.com>
src/mon/MonCap.cc

index 6a9d4857f0b2a3b154215ff8c12b403552fe8c5f..b5c5ab6a5bf32763d31558f13c296d20fe7a916a 100644 (file)
@@ -202,8 +202,9 @@ void MonCapGrant::expand_profile(const EntityName& name) const
     profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_X));
     profile_grants.push_back(MonCapGrant("config-key", MON_CAP_R | MON_CAP_W));
     profile_grants.push_back(MonCapGrant("config", MON_CAP_R | MON_CAP_W));
-    // cephadm orchestrator provisions new daemon keys
+    // cephadm orchestrator provisions new daemon keys and updates caps
     profile_grants.push_back(MonCapGrant("auth get-or-create"));
+    profile_grants.push_back(MonCapGrant("auth caps"));
     profile_grants.push_back(MonCapGrant("auth rm"));
     // tell commands (this is a bit of a kludge)
     profile_grants.push_back(MonCapGrant("smart"));