From 58e8bd808ef2ce8f59193c616776644c5b0374c1 Mon Sep 17 00:00:00 2001 From: Jason Dillaman Date: Fri, 15 Sep 2017 10:37:55 -0400 Subject: [PATCH] doc/release-notes: ensure RBD users can blacklist prior to upgrade Fixes: http://tracker.ceph.com/issues/21353 Signed-off-by: Jason Dillaman --- doc/release-notes.rst | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/doc/release-notes.rst b/doc/release-notes.rst index 884ce172261..6fbaa897f31 100644 --- a/doc/release-notes.rst +++ b/doc/release-notes.rst @@ -163,7 +163,8 @@ Major Changes from Kraken * Specifying user authorization capabilities for RBD clients has been simplified. The general syntax for using RBD capability profiles is "mon 'profile rbd' osd 'profile rbd[-read-only][ pool={pool-name}[, ...]]'". - For more details see "User Management" in the documentation. + For more details see :doc:`rados/operations/user-management` + in the documentation. - *CephFS*: @@ -417,6 +418,12 @@ Upgrade from Jewel or Kraken # ceph osd set noout +#. Verify that all RBD client users have sufficient caps to blacklist + other client users. RBD client users with only ``"allow r"`` + monitor caps should to be updated as follows:: + + # ceph auth caps client. mon 'allow r, allow command "osd blacklist"' + #. Upgrade monitors by installing the new packages and restarting the monitor daemons. Note that, unlike prior releases, the ceph-mon daemons *must* be upgraded first:: -- 2.39.5