Ceph » CephFS

About a year ago the ceph.conf supported something like:

[:/foo]
 allow = 192.168.0.24

This way you could limit access to specific parts of the tree to clients.

Since Ceph is one big filesystem you would need such a feature to use Ceph safely for multiple tasks.

This could be connected to the name the client is authenticating with?

[:/]
  policy = deny
  allow = client.admin, client.server1, client.server2

[:/foo]
  policy = allow
  deny = client.server1

[:/alpha]
  policy = allow
  deny = client.server2

[:/beta]
  allow = client.server3

Something like that should cover it all?