From: Adam King <adking@redhat.com>
Date: Mon, 29 Apr 2024 17:41:10 +0000 (-0400)
Subject: mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"
X-Git-Tag: v20.0.0~2034^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F57143%2Fhead;p=ceph.git

mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"

Otherwise it is impossible to make rbd snapshots

Fixes: https://tracker.ceph.com/issues/65691

Signed-off-by: Adam King <adking@redhat.com>
---

diff --git a/src/pybind/mgr/cephadm/services/nvmeof.py b/src/pybind/mgr/cephadm/services/nvmeof.py
index d133ad75d252..d1b571dd64c5 100644
--- a/src/pybind/mgr/cephadm/services/nvmeof.py
+++ b/src/pybind/mgr/cephadm/services/nvmeof.py
@@ -32,7 +32,7 @@ class NvmeofService(CephService):
 
         keyring = self.get_keyring_with_caps(self.get_auth_entity(nvmeof_gw_id),
                                              ['mon', 'profile rbd',
-                                              'osd', 'allow all tag rbd *=*'])
+                                              'osd', 'profile rbd'])
 
         # TODO: check if we can force jinja2 to generate dicts with double quotes instead of using json.dumps
         transport_tcp_options = json.dumps(spec.transport_tcp_options) if spec.transport_tcp_options else None