From dac13abf320810bf4fd6bca653af353df78af48f Mon Sep 17 00:00:00 2001 From: Patrick Donnelly Date: Wed, 20 May 2020 16:15:29 -0700 Subject: [PATCH] pybind/mgr/cephadm: remove mds auth cap for nfs recovery db cred There's no reason for this cap to be used for talking to the MDS. The individual exports have their own caps for talking to the file system. Fixes: https://tracker.ceph.com/issues/45632 Signed-off-by: Patrick Donnelly --- src/pybind/mgr/cephadm/services/nfs.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/pybind/mgr/cephadm/services/nfs.py b/src/pybind/mgr/cephadm/services/nfs.py index ee847c3e131dc..cc786d33ed6a0 100644 --- a/src/pybind/mgr/cephadm/services/nfs.py +++ b/src/pybind/mgr/cephadm/services/nfs.py @@ -124,8 +124,7 @@ class NFSGanesha(object): 'prefix': 'auth caps', 'entity': entity, 'caps': ['mon', 'allow r', - 'osd', osd_caps, - 'mds', 'allow rw'], + 'osd', osd_caps], }) if ret != 0: -- 2.39.5