From ef8a46a3b13ea6753b8c03121da4c6daff370fd2 Mon Sep 17 00:00:00 2001 From: Michael Fritch Date: Tue, 17 Mar 2020 11:17:17 -0600 Subject: [PATCH] mon: allow `auth caps` for `mgr` profile cephadm orchestrator needs to update the caps during reconfig/redeploy Signed-off-by: Michael Fritch --- src/mon/MonCap.cc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/mon/MonCap.cc b/src/mon/MonCap.cc index 6a9d4857f0b2a..b5c5ab6a5bf32 100644 --- a/src/mon/MonCap.cc +++ b/src/mon/MonCap.cc @@ -202,8 +202,9 @@ void MonCapGrant::expand_profile(const EntityName& name) const profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_X)); profile_grants.push_back(MonCapGrant("config-key", MON_CAP_R | MON_CAP_W)); profile_grants.push_back(MonCapGrant("config", MON_CAP_R | MON_CAP_W)); - // cephadm orchestrator provisions new daemon keys + // cephadm orchestrator provisions new daemon keys and updates caps profile_grants.push_back(MonCapGrant("auth get-or-create")); + profile_grants.push_back(MonCapGrant("auth caps")); profile_grants.push_back(MonCapGrant("auth rm")); // tell commands (this is a bit of a kludge) profile_grants.push_back(MonCapGrant("smart")); -- 2.39.5