Feature #15614: CephFSVolumeClient: read-only authorization for volumes - CephFS - Ceph

Actions

Copy link

Feature #15614

closed

CephFSVolumeClient: read-only authorization for volumes

Added by John Spray almost 8 years ago. Updated about 5 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Ramana Raja

Category:

Target version:

% Done:

Source:

other

Tags:

Backport:

jewel

Reviewed:

Affected Versions:

Component(FS):

Labels (FS):

Manila

Pull request ID:

Description

I don't think we have tests for how well setting "r" mds auth caps works for clients, hopefully well enough that this is simple to do.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Ramana Raja almost 8 years ago

Status changed from New to In Progress

Actions

Copy link

Updated by Ramana Raja almost 8 years ago

https://github.com/ceph/ceph/pull/8929
https://github.com/ceph/ceph-qa-suite/pull/983

Actions

Copy link

Updated by Ramana Raja almost 8 years ago

Status changed from In Progress to 4

Actions

Copy link

Updated by Ramana Raja almost 8 years ago

Status changed from 4 to Fix Under Review

Actions

Copy link

Updated by John Spray almost 8 years ago

Status changed from Fix Under Review to 15
Backport set to jewel

commit 011ea5e7fb35ee07848e0c3abac24702a778ad63
Author: Ramana Raja <rraja@redhat.com>
Date:   Wed Apr 27 23:26:44 2016 +0530

    ceph_volume_client: allow read-only authorization for volumes

    Allow clients to be restricted to read-only mount of the volume
    by restricting their ceph auth ID's MDS and OSD caps to read-only.

    Fixes: http://tracker.ceph.com/issues/15614

    Signed-off-by: Ramana Raja <rraja@redhat.com>

Actions

Copy link