From: Michael Fritch Date: Tue, 17 Mar 2020 17:17:17 +0000 (-0600) Subject: mon: allow `auth caps` for `mgr` profile X-Git-Tag: v17.0.0~2825^2~3 X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=ef8a46a3b13ea6753b8c03121da4c6daff370fd2;p=ceph.git mon: allow `auth caps` for `mgr` profile cephadm orchestrator needs to update the caps during reconfig/redeploy Signed-off-by: Michael Fritch --- diff --git a/src/mon/MonCap.cc b/src/mon/MonCap.cc index 6a9d4857f0b2a..b5c5ab6a5bf32 100644 --- a/src/mon/MonCap.cc +++ b/src/mon/MonCap.cc @@ -202,8 +202,9 @@ void MonCapGrant::expand_profile(const EntityName& name) const profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_X)); profile_grants.push_back(MonCapGrant("config-key", MON_CAP_R | MON_CAP_W)); profile_grants.push_back(MonCapGrant("config", MON_CAP_R | MON_CAP_W)); - // cephadm orchestrator provisions new daemon keys + // cephadm orchestrator provisions new daemon keys and updates caps profile_grants.push_back(MonCapGrant("auth get-or-create")); + profile_grants.push_back(MonCapGrant("auth caps")); profile_grants.push_back(MonCapGrant("auth rm")); // tell commands (this is a bit of a kludge) profile_grants.push_back(MonCapGrant("smart"));