From: Patrick Donnelly <pdonnell@redhat.com>
Date: Wed, 20 May 2020 23:15:29 +0000 (-0700)
Subject: pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred
X-Git-Tag: v15.2.4~69^2~12
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=1ffbab5e10ee9074ee93c427cc4ef36db799c2fe;p=ceph.git

pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred

There's no reason for this cap to be used for talking to the MDS. The
individual exports have their own caps for talking to the file system.

Fixes: https://tracker.ceph.com/issues/45632
Signed-off-by: Patrick Donnelly <pdonnell@redhat.com>
(cherry picked from commit dac13abf320810bf4fd6bca653af353df78af48f)
---

diff --git a/src/pybind/mgr/cephadm/services/nfs.py b/src/pybind/mgr/cephadm/services/nfs.py
index ee847c3e131..cc786d33ed6 100644
--- a/src/pybind/mgr/cephadm/services/nfs.py
+++ b/src/pybind/mgr/cephadm/services/nfs.py
@@ -124,8 +124,7 @@ class NFSGanesha(object):
             'prefix': 'auth caps',
             'entity': entity,
             'caps': ['mon', 'allow r',
-                     'osd', osd_caps,
-                     'mds', 'allow rw'],
+                     'osd', osd_caps],
         })
 
         if ret != 0: