Bug #19954
mgr key needs "mon 'allow *'" caps
% Done:
0%
Source:
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
Prior to https://github.com/ceph/ceph/commit/5906e359bd and https://github.com/ceph/ceph/commit/6625fcd8fd, the mgr key had "mon 'allow *'" caps. Since those commits, it only has "mon 'allow profile mgr'". This means that mgr modules now can't set config keys, so, for example, the new REST API (https://github.com/ceph/ceph/pull/14457) won't actually be able to persist its settings.
Is there a reason the mgr key should have limited mon capabilities, or can we revert those two commits?
History
#1 Updated by John Spray over 6 years ago
- Status changed from New to Resolved
This is handled with the "profile mgr" mon caps now.