Merge pull request #57143 from adk3798/nvmeof-osd-profile-rbd

adk3798 · web-flow · commit 8dc533735b88 · 2024-05-02T08:04:30.000-04:00
mgr/cephadm: set OSD cap for NVMEoF daemon to "profile rbd"

Reviewed-by: Ernesto Puerta &lt;epuertat@redhat.com&gt;
Reviewed-by: Nizamudeen A &lt;nia@redhat.com&gt;
diff --git a/src/pybind/mgr/cephadm/services/nvmeof.py b/src/pybind/mgr/cephadm/services/nvmeof.py
@@ -32,7 +32,7 @@ def prepare_create(self, daemon_spec: CephadmDaemonDeploySpec) -> CephadmDaemonD
 
         keyring = self.get_keyring_with_caps(self.get_auth_entity(nvmeof_gw_id),
                                              ['mon', 'profile rbd',
-                                              'osd', 'allow all tag rbd *=*'])
+                                              'osd', 'profile rbd'])
 
         # TODO: check if we can force jinja2 to generate dicts with double quotes instead of using json.dumps
         transport_tcp_options = json.dumps(spec.transport_tcp_options) if spec.transport_tcp_options else None
