Project

General

Profile

Actions

Bug #64417

open

mds: mds caps can't be updated to add root_squash

Added by Rishabh Dave 3 months ago. Updated 3 months ago.

Status:
Fix Under Review
Priority:
Normal
Assignee:
Category:
-
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
Regression:
No
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
MDS
Labels (FS):
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Adding a new entity with root_squash in its caps works as expected -

$ ./bin/ceph fs authorize a client.y / rw root_squash
[client.y]
        key = AQCnT8tl3+1BMhAAUeusXXLxRC9Q/KzHQToUag==
        caps mds = "allow rw fsname=a root_squash" 
        caps mon = "allow r fsname=a" 
        caps osd = "allow rw tag cephfs data=a" 

But adding root_squash to a MDS caps in a entity keyring that already exists doesn't work -

$ ./bin/ceph fs authorize a client.x / rw
[client.x]
        key = AQBaT8tlCWc8ARAAAt9Y/PCPaa/UJ3QhEcJtKQ==
        caps mds = "allow rw fsname=a" 
        caps mon = "allow r fsname=a" 
        caps osd = "allow rw tag cephfs data=a" 
$ ./bin/ceph fs authorize a client.x / rw root_squash
no update for caps of client.x
$ ./bin/ceph auth get client.x
[client.x]
        key = AQBaT8tlCWc8ARAAAt9Y/PCPaa/UJ3QhEcJtKQ==
        caps mds = "allow rw fsname=a" 
        caps mon = "allow r fsname=a" 
        caps osd = "allow rw tag cephfs data=a" 

This shouldn't be the case since it is possible to update the caps assigned to an entity using ceph fs authorize command. Like other parts of the MDS cap, it should be possible to update the value of this root_squash too.

Actions #1

Updated by Rishabh Dave 3 months ago

  • Severity changed from 3 - minor to 2 - major
Actions

Also available in: Atom PDF