From 5906e359bd7249969e7d25bcf7d68e22a238acef Mon Sep 17 00:00:00 2001
From: Sage Weil <sage@redhat.com>
Date: Mon, 13 Mar 2017 14:00:06 -0400
Subject: [PATCH] vstart.sh: fix mgr caps

Signed-off-by: Sage Weil <sage@redhat.com>
---
 src/vstart.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/vstart.sh b/src/vstart.sh
index 7c3c92bc589..50126580225 100755
--- a/src/vstart.sh
+++ b/src/vstart.sh
@@ -592,7 +592,7 @@ start_mgr() {
             mkdir -p $CEPH_DEV_DIR/mgr.$name
             key_fn=$CEPH_DEV_DIR/mgr.$name/keyring
             $SUDO $CEPH_BIN/ceph-authtool --create-keyring --gen-key --name=mgr.$name $key_fn
-            ceph_adm -i $key_fn auth add mgr.$name mon 'allow *'
+            ceph_adm -i $key_fn auth add mgr.$name mon 'allow profile mgr'
         fi
 
         wconf <<EOF
@@ -652,7 +652,7 @@ EOF
 			    prun $SUDO "$CEPH_BIN/ceph-authtool" --create-keyring --gen-key --name="mds.${name}s" \
 				     "$CEPH_DEV_DIR/mds.${name}s/keyring"
 			    ceph_adm -i "$CEPH_DEV_DIR/mds.${name}s/keyring" auth add "mds.${name}s" \
-				         mon 'allow *' osd 'allow *' mds 'allow' mgr 'allow profile mds'
+				         mon 'allow profile mds' osd 'allow *' mds 'allow' mgr 'allow profile mds'
 	        fi
 	    fi
 
-- 
2.47.3