From: Adam King <adking@redhat.com>
Date: Mon, 29 Apr 2024 17:41:10 +0000 (-0400)
Subject: mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"
X-Git-Tag: v19.1.1~198^2
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=4a6dab15188b59bbf111dd90b75663a2598eee8f;p=ceph.git

mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"

Otherwise it is impossible to make rbd snapshots

Fixes: https://tracker.ceph.com/issues/65691

Signed-off-by: Adam King <adking@redhat.com>
(cherry picked from commit c83c2cd5b0f9d35465d8f11680c95deff54e746b)
---

diff --git a/src/pybind/mgr/cephadm/services/nvmeof.py b/src/pybind/mgr/cephadm/services/nvmeof.py
index d133ad75d252f..d1b571dd64c57 100644
--- a/src/pybind/mgr/cephadm/services/nvmeof.py
+++ b/src/pybind/mgr/cephadm/services/nvmeof.py
@@ -32,7 +32,7 @@ class NvmeofService(CephService):
 
         keyring = self.get_keyring_with_caps(self.get_auth_entity(nvmeof_gw_id),
                                              ['mon', 'profile rbd',
-                                              'osd', 'allow all tag rbd *=*'])
+                                              'osd', 'profile rbd'])
 
         # TODO: check if we can force jinja2 to generate dicts with double quotes instead of using json.dumps
         transport_tcp_options = json.dumps(spec.transport_tcp_options) if spec.transport_tcp_options else None