From: Patrick Donnelly <pdonnell@redhat.com>
Date: Wed, 20 May 2020 23:15:29 +0000 (-0700)
Subject: pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred
X-Git-Tag: v16.1.0~2219^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=dac13abf320810bf4fd6bca653af353df78af48f;p=ceph.git

pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred

There's no reason for this cap to be used for talking to the MDS. The
individual exports have their own caps for talking to the file system.

Fixes: https://tracker.ceph.com/issues/45632
Signed-off-by: Patrick Donnelly <pdonnell@redhat.com>
---

diff --git a/src/pybind/mgr/cephadm/services/nfs.py b/src/pybind/mgr/cephadm/services/nfs.py
index ee847c3e131d..cc786d33ed6a 100644
--- a/src/pybind/mgr/cephadm/services/nfs.py
+++ b/src/pybind/mgr/cephadm/services/nfs.py
@@ -124,8 +124,7 @@ class NFSGanesha(object):
             'prefix': 'auth caps',
             'entity': entity,
             'caps': ['mon', 'allow r',
-                     'osd', osd_caps,
-                     'mds', 'allow rw'],
+                     'osd', osd_caps],
         })
 
         if ret != 0: