ceph: keys: add mgr allow * to client.admin

needed for data that now gets queried via the mgr instead of
via the mon.
This commit is contained in:
Fabian Grünbichler 2017-06-27 16:42:16 +02:00
parent 50239dba68
commit d197634b4b

View File

@ -930,6 +930,7 @@ __PACKAGE__->register_method ({
run_command("ceph-authtool $pve_mon_key_path.tmp -n client.admin --set-uid=0 " .
"--cap mds 'allow' " .
"--cap osd 'allow *' " .
"--cap mgr 'allow *' " .
"--cap mon 'allow *'");
run_command("cp $pve_mon_key_path.tmp /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;
run_command("chown ceph:ceph /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;