Project

General

Profile

Feature #15614

CephFSVolumeClient: read-only authorization for volumes

Added by John Spray almost 8 years ago. Updated about 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
-
% Done:

0%

Source:
other
Tags:
Backport:
jewel
Reviewed:
Affected Versions:
Component(FS):
Labels (FS):
Manila
Pull request ID:

Description

I don't think we have tests for how well setting "r" mds auth caps works for clients, hopefully well enough that this is simple to do.


Related issues

Copied to CephFS - Backport #15999: jewel: CephFSVolumeClient: read-only authorization for volumes Resolved

History

#1 Updated by Ramana Raja almost 8 years ago

  • Status changed from New to In Progress

#3 Updated by Ramana Raja almost 8 years ago

  • Status changed from In Progress to 4

#4 Updated by Ramana Raja almost 8 years ago

  • Status changed from 4 to Fix Under Review

#5 Updated by John Spray almost 8 years ago

  • Status changed from Fix Under Review to 15
  • Backport set to jewel
commit 011ea5e7fb35ee07848e0c3abac24702a778ad63
Author: Ramana Raja <rraja@redhat.com>
Date:   Wed Apr 27 23:26:44 2016 +0530

    ceph_volume_client: allow read-only authorization for volumes

    Allow clients to be restricted to read-only mount of the volume
    by restricting their ceph auth ID's MDS and OSD caps to read-only.

    Fixes: http://tracker.ceph.com/issues/15614

    Signed-off-by: Ramana Raja <rraja@redhat.com>

#6 Updated by Nathan Cutler almost 8 years ago

  • Status changed from 15 to Pending Backport

#7 Updated by Nathan Cutler almost 8 years ago

  • Copied to Backport #15999: jewel: CephFSVolumeClient: read-only authorization for volumes added

#8 Updated by Ramana Raja over 7 years ago

  • Status changed from Pending Backport to Resolved

#9 Updated by Patrick Donnelly about 5 years ago

  • Category deleted (87)
  • Labels (FS) Manila added

Also available in: Atom PDF