From 548815bb3ebabf983024bf9b246cc2a2bd82c59c Mon Sep 17 00:00:00 2001 From: Ramana Raja Date: Thu, 11 Jul 2019 00:33:20 +0530 Subject: [PATCH] mon/MonCap: allow 'profile mgr' to create/update/del auth IDs Signed-off-by: Ramana Raja (cherry picked from commit d3aea5579778a73dc2418e7b137dc21717944c3e) --- src/mon/MonCap.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/mon/MonCap.cc b/src/mon/MonCap.cc index b5c5ab6a5bf3..c4f750504523 100644 --- a/src/mon/MonCap.cc +++ b/src/mon/MonCap.cc @@ -199,7 +199,7 @@ void MonCapGrant::expand_profile(const EntityName& name) const profile_grants.push_back(MonCapGrant("mds", MON_CAP_R | MON_CAP_W)); profile_grants.push_back(MonCapGrant("fs", MON_CAP_R | MON_CAP_W)); profile_grants.push_back(MonCapGrant("osd", MON_CAP_R | MON_CAP_W)); - profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_X)); + profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_W | MON_CAP_X)); profile_grants.push_back(MonCapGrant("config-key", MON_CAP_R | MON_CAP_W)); profile_grants.push_back(MonCapGrant("config", MON_CAP_R | MON_CAP_W)); // cephadm orchestrator provisions new daemon keys and updates caps -- 2.47.3