Project

General

Profile

Actions

Bug #46081

closed

cephadm: mds permissions for osd are unnecessarily permissive

Added by Patrick Donnelly almost 4 years ago. Updated almost 4 years ago.

Status:
Resolved
Priority:
Normal
Category:
-
Target version:
% Done:

0%

Source:
Development
Tags:
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
Labels (FS):
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

mds.quay-registry.reesi002.zgyffj
        key: AQB2leteyw+jNRAAD7HGCeh7tRNonnSb/lk8ZA==
        caps: [mds] allow
        caps: [mon] profile mds
        caps: [osd] allow rwx

From LRC ^.

We can restrict to pools used by file systems.


Related issues 1 (0 open1 closed)

Copied to CephFS - Backport #46185: octopus: cephadm: mds permissions for osd are unnecessarily permissiveResolvedSebastian WagnerActions
Actions #1

Updated by Patrick Donnelly almost 4 years ago

  • Status changed from In Progress to Fix Under Review
  • Pull request ID set to 35655
Actions #2

Updated by Sebastian Wagner almost 4 years ago

  • Status changed from Fix Under Review to Pending Backport
Actions #3

Updated by Nathan Cutler almost 4 years ago

  • Copied to Backport #46185: octopus: cephadm: mds permissions for osd are unnecessarily permissive added
Actions #4

Updated by Nathan Cutler almost 4 years ago

  • Status changed from Pending Backport to Resolved
Actions #5

Updated by Sebastian Wagner almost 4 years ago

  • Target version changed from v16.0.0 to v15.2.5
Actions

Also available in: Atom PDF