From 1ffbab5e10ee9074ee93c427cc4ef36db799c2fe Mon Sep 17 00:00:00 2001 From: Patrick Donnelly Date: Wed, 20 May 2020 16:15:29 -0700 Subject: [PATCH] pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred There's no reason for this cap to be used for talking to the MDS. The individual exports have their own caps for talking to the file system. Fixes: https://tracker.ceph.com/issues/45632 Signed-off-by: Patrick Donnelly (cherry picked from commit dac13abf320810bf4fd6bca653af353df78af48f) --- src/pybind/mgr/cephadm/services/nfs.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/pybind/mgr/cephadm/services/nfs.py b/src/pybind/mgr/cephadm/services/nfs.py index ee847c3e131dc..cc786d33ed6a0 100644 --- a/src/pybind/mgr/cephadm/services/nfs.py +++ b/src/pybind/mgr/cephadm/services/nfs.py @@ -124,8 +124,7 @@ class NFSGanesha(object): 'prefix': 'auth caps', 'entity': entity, 'caps': ['mon', 'allow r', - 'osd', osd_caps, - 'mds', 'allow rw'], + 'osd', osd_caps], }) if ret != 0: -- 2.39.5