Project

General

Profile

Feature #44928

Updated by Ramana Raja about 4 years ago

In manila, when an auth ID is denied access to a subvolume subvolume, not only are the auth ID's caps are suitably removed, and but also the clients that have mounted the subvolume using the auth ID are need to be immediately evicted, denying access to the subvolume. 
 See https://github.com/ceph/ceph/blob/octopus/src/pybind/ceph_volume_client.py#L405 

 The mgr-volumes CLI could look like, 

 `fs subvolume evict <volname> <subvolname>    <auth name> [--group_name <group_name>]` 

 e.g., 
 $ ceph fs subvolume evict cephfs manila-share-00 client.bob --group_name manila-share-group-00

Back