Project

General

Profile

Bug #46081

cephadm: mds permissions for osd are unnecessarily permissive

Added by Patrick Donnelly almost 4 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Category:
-
Target version:
% Done:

0%

Source:
Development
Tags:
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
Labels (FS):
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

mds.quay-registry.reesi002.zgyffj
        key: AQB2leteyw+jNRAAD7HGCeh7tRNonnSb/lk8ZA==
        caps: [mds] allow
        caps: [mon] profile mds
        caps: [osd] allow rwx

From LRC ^.

We can restrict to pools used by file systems.


Related issues

Copied to CephFS - Backport #46185: octopus: cephadm: mds permissions for osd are unnecessarily permissive Resolved

History

#1 Updated by Patrick Donnelly almost 4 years ago

  • Status changed from In Progress to Fix Under Review
  • Pull request ID set to 35655

#2 Updated by Sebastian Wagner almost 4 years ago

  • Status changed from Fix Under Review to Pending Backport

#3 Updated by Nathan Cutler almost 4 years ago

  • Copied to Backport #46185: octopus: cephadm: mds permissions for osd are unnecessarily permissive added

#4 Updated by Nathan Cutler over 3 years ago

  • Status changed from Pending Backport to Resolved

#5 Updated by Sebastian Wagner over 3 years ago

  • Target version changed from v16.0.0 to v15.2.5

Also available in: Atom PDF