Project

General

Profile

Actions

Bug #46081

closed

cephadm: mds permissions for osd are unnecessarily permissive

Added by Patrick Donnelly almost 6 years ago. Updated 8 months ago.

Status:
Resolved
Priority:
Normal
Category:
-
Target version:
% Done:

0%

Source:
Development
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
Labels (FS):
Pull request ID:
Tags (freeform):
Fixed In:
v16.0.0-2811-ga647906cd7
Released In:
v16.2.0~2199
Upkeep Timestamp:
2025-07-14T19:39:53+00:00

Description

mds.quay-registry.reesi002.zgyffj
        key: AQB2leteyw+jNRAAD7HGCeh7tRNonnSb/lk8ZA==
        caps: [mds] allow
        caps: [mon] profile mds
        caps: [osd] allow rwx

From LRC ^.

We can restrict to pools used by file systems.


Related issues 1 (0 open1 closed)

Copied to CephFS - Backport #46185: octopus: cephadm: mds permissions for osd are unnecessarily permissiveResolvedSebastian WagnerActions
Actions #1

Updated by Patrick Donnelly almost 6 years ago

  • Status changed from In Progress to Fix Under Review
  • Pull request ID set to 35655
Actions #2

Updated by Sebastian Wagner over 5 years ago

  • Status changed from Fix Under Review to Pending Backport
Actions #3

Updated by Nathan Cutler over 5 years ago

  • Copied to Backport #46185: octopus: cephadm: mds permissions for osd are unnecessarily permissive added
Actions #4

Updated by Nathan Cutler over 5 years ago

  • Status changed from Pending Backport to Resolved
Actions #5

Updated by Sebastian Wagner over 5 years ago

  • Target version changed from v16.0.0 to v15.2.5
Actions #6

Updated by Upkeep Bot 8 months ago

  • Merge Commit set to a647906cd7c6910c0ea56094b60267fd2f12e85c
  • Fixed In set to v16.0.0-2811-ga647906cd7
  • Released In set to v16.2.0~2199
  • Upkeep Timestamp set to 2025-07-14T19:39:53+00:00
Actions

Also available in: Atom PDF