Actions
Bug #47921
closedBad auth caps for orchestrated mds daemon
Status:
Can't reproduce
Priority:
Low
Assignee:
-
Category:
cephadm
Target version:
-
% Done:
0%
Source:
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
mds created by "ceph orch apply mds 1" get auth caps of
> mds.test_fs.******.gpqtol > key: ***********************== > caps: [mds] allow > caps: [mon] profile mds > caps: [osd] allow rw tag cephfs *=*
This auth caps will leads to
> [ERR] MDS_DAMAGE: 1 mds daemon damaged > fs test_fs mds.0 is damaged
During any mds failure when the fs is mounted and in operations
The working mds should have caps of
> mds.FlexCephAF1b > key: AQCCW29e1ZY1NRAAwjSB6zG6DMzM9wusyRPgQA== > caps: [mds] allow * *> caps: [mgr] profile mds* > caps: [mon] profile mds > caps: [osd] allow *
Actions