Project

General

Profile

Feature #44928

mgr/volumes: evict clients based on auth ID and subvolume mounted

Added by Ramana Raja about 1 year ago. Updated 4 months ago.

Status:
Resolved
Priority:
High
Assignee:
Kotresh Hiremath Ravishankar
Category:
-
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
pacific,octopus,nautilus
Reviewed:
Affected Versions:
Component(FS):
mgr/volumes
Labels (FS):
Manila
Pull request ID:
38786

Description

In manila, when an auth ID is denied access to a subvolume the auth ID's caps are suitably removed, and the clients that have mounted the subvolume using the auth ID are immediately evicted, denying access to the subvolume.
See https://github.com/ceph/ceph/blob/octopus/src/pybind/ceph_volume_client.py#L405

The mgr-volumes CLI could look like,

`fs subvolume evict <volname> <subvolname> <auth name> [--group_name <group_name>]`

e.g.,
$ ceph fs subvolume evict cephfs manila-share-00 client.bob --group_name manila-share-group-00

Related issues

Copied to CephFS - Backport #49027: pacific: mgr/volumes: evict clients based on auth ID and subvolume mounted Resolved
Copied to CephFS - Backport #49028: nautilus: mgr/volumes: evict clients based on auth ID and subvolume mounted Resolved
Copied to CephFS - Backport #49029: octopus: mgr/volumes: evict clients based on auth ID and subvolume mounted Resolved

History

#1 Updated by Ramana Raja about 1 year ago

  • Description updated (diff)

#2 Updated by Ramana Raja 8 months ago

  • Assignee set to Kotresh Hiremath Ravishankar
  • Priority changed from Normal to High

#3 Updated by Kotresh Hiremath Ravishankar 6 months ago

  • Status changed from New to In Progress

#4 Updated by Kotresh Hiremath Ravishankar 6 months ago

  • Status changed from In Progress to Fix Under Review
  • Pull request ID set to 38786

#5 Updated by Ramana Raja 5 months ago

  • Target version deleted (v16.0.0)
  • Backport changed from octopus,nautilus to pacific,octopus,nautilus

#6 Updated by Ramana Raja 5 months ago

  • Status changed from Fix Under Review to Pending Backport

#7 Updated by Backport Bot 5 months ago

  • Copied to Backport #49027: pacific: mgr/volumes: evict clients based on auth ID and subvolume mounted added

#8 Updated by Backport Bot 5 months ago

  • Copied to Backport #49028: nautilus: mgr/volumes: evict clients based on auth ID and subvolume mounted added

#9 Updated by Backport Bot 5 months ago

  • Copied to Backport #49029: octopus: mgr/volumes: evict clients based on auth ID and subvolume mounted added

#10 Updated by Nathan Cutler 4 months ago

  • Status changed from Pending Backport to Resolved

While running with --resolve-parent, the script "backport-create-issue" noticed that all backports of this issue are in status "Resolved" or "Rejected".

Also available in: Atom PDF