From bab1d6b39a9d2dca18a30e476c519c201632f41c Mon Sep 17 00:00:00 2001 From: Shweta Sodani Date: Thu, 2 Jul 2026 21:52:11 +0530 Subject: [PATCH] mgr/cephadm: Add documentation for RGW keyring capability dependencies This serves as a reminder for maintainers to verify whether capability changes in the RGW service should also be applied to SMB and NFS services to maintain consistency across services that use librgw. Signed-off-by: Shweta Sodani --- src/pybind/mgr/cephadm/services/cephadmservice.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/pybind/mgr/cephadm/services/cephadmservice.py b/src/pybind/mgr/cephadm/services/cephadmservice.py index 426b86f1b5c..bc9c270844d 100644 --- a/src/pybind/mgr/cephadm/services/cephadmservice.py +++ b/src/pybind/mgr/cephadm/services/cephadmservice.py @@ -1737,6 +1737,11 @@ class RgwService(CephService): return daemon_spec def get_keyring(self, rgw_id: str) -> str: + """ + SMB and NFS services embed librgw. If the RGW service capabilities are + updated, verify whether the same changes are required for these + services as well. + """ keyring = self.get_keyring_with_caps(self.get_auth_entity(rgw_id), ['mon', 'allow *', 'mgr', 'allow rw', -- 2.47.3