Actions
Bug #64417
openmds: mds caps can't be updated to add root_squash
% Done:
0%
Source:
Tags:
Backport:
Regression:
No
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
MDS
Labels (FS):
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
Adding a new entity with root_squash
in its caps works as expected -
$ ./bin/ceph fs authorize a client.y / rw root_squash [client.y] key = AQCnT8tl3+1BMhAAUeusXXLxRC9Q/KzHQToUag== caps mds = "allow rw fsname=a root_squash" caps mon = "allow r fsname=a" caps osd = "allow rw tag cephfs data=a"
But adding root_squash
to a MDS caps in a entity keyring that already exists doesn't work -
$ ./bin/ceph fs authorize a client.x / rw [client.x] key = AQBaT8tlCWc8ARAAAt9Y/PCPaa/UJ3QhEcJtKQ== caps mds = "allow rw fsname=a" caps mon = "allow r fsname=a" caps osd = "allow rw tag cephfs data=a" $ ./bin/ceph fs authorize a client.x / rw root_squash no update for caps of client.x $ ./bin/ceph auth get client.x [client.x] key = AQBaT8tlCWc8ARAAAt9Y/PCPaa/UJ3QhEcJtKQ== caps mds = "allow rw fsname=a" caps mon = "allow r fsname=a" caps osd = "allow rw tag cephfs data=a"
This shouldn't be the case since it is possible to update the caps assigned to an entity using ceph fs authorize
command. Like other parts of the MDS cap, it should be possible to update the value of this root_squash too.
Updated by Rishabh Dave 3 months ago
- Severity changed from 3 - minor to 2 - major
Actions