Project

General

Profile

Feature #15614

CephFSVolumeClient: read-only authorization for volumes

Added by John Spray about 3 years ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
-
Start date:
04/26/2016
Due date:
% Done:

0%

Source:
other
Tags:
Backport:
jewel
Reviewed:
Affected Versions:
Component(FS):
Labels (FS):
Manila
Pull request ID:

Description

I don't think we have tests for how well setting "r" mds auth caps works for clients, hopefully well enough that this is simple to do.


Related issues

Copied to fs - Backport #15999: jewel: CephFSVolumeClient: read-only authorization for volumes Resolved

History

#1 Updated by Ramana Raja about 3 years ago

  • Status changed from New to In Progress

#3 Updated by Ramana Raja about 3 years ago

  • Status changed from In Progress to Feedback

#4 Updated by Ramana Raja about 3 years ago

  • Status changed from Feedback to Need Review

#5 Updated by John Spray about 3 years ago

  • Status changed from Need Review to Pending Upstream
  • Backport set to jewel
commit 011ea5e7fb35ee07848e0c3abac24702a778ad63
Author: Ramana Raja <rraja@redhat.com>
Date:   Wed Apr 27 23:26:44 2016 +0530

    ceph_volume_client: allow read-only authorization for volumes

    Allow clients to be restricted to read-only mount of the volume
    by restricting their ceph auth ID's MDS and OSD caps to read-only.

    Fixes: http://tracker.ceph.com/issues/15614

    Signed-off-by: Ramana Raja <rraja@redhat.com>

#6 Updated by Nathan Cutler about 3 years ago

  • Status changed from Pending Upstream to Pending Backport

#7 Updated by Nathan Cutler about 3 years ago

  • Copied to Backport #15999: jewel: CephFSVolumeClient: read-only authorization for volumes added

#8 Updated by Ramana Raja over 2 years ago

  • Status changed from Pending Backport to Resolved

#9 Updated by Patrick Donnelly 3 months ago

  • Category deleted (87)
  • Labels (FS) Manila added

Also available in: Atom PDF